coldbraid

CVE-2019-11043 PHP FastCGI Process Manager (FPM)

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

CVSS
not scored

CWE-120

On CISA’s exploited list

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Added
2022-03-25
Federal patch deadline
2022-04-15
Ransomware use
known