In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
Connections 24
has vulnerable target scope5 retained · stored CVE-2019-11043 → product-19e25a323a33d2e95ae9af9c6f5d3c68dd2ffbbccb9a61583d6723e58fce118319432d5e-f8c9-4fa9-906d-b38b4f45fc561ba89cad-7671-4051-84b4-f94cb71f5efd2eef0ba4-d8a5-488f-a5d8-bb25ca6b3d82959f8a5d-1202-4762-9ec3-8bab1e0a575afcd06d6c-d3b1-43ca-8c94-b04e281693ee
has vulnerable target scope6 retained · stored CVE-2019-11043 → product-280a720ee74a48a2d9e1641fe847ee843978848900003d7939566317c7359fb53d21b73c-32db-4763-9bd3-25012390d4146c9a5992-ee4a-41dd-8aba-ad23689c416d8d0168dd-7ef0-46fc-b746-257ffc43616f8f826c75-8567-47d4-a68e-236608f6e31dbefe307a-4acb-441b-846a-abe87de7df7fd577615f-291b-4c00-a208-350a681cf05a
has vulnerable target scope1 retained · stored CVE-2019-11043 → product-2a04e270d265cc60bf7ebd5aeadda41d1530be7f39d773f24a7628595a449eed95a919e9-e7dc-4630-bdfb-9af69d51052a
has vulnerable target scope6 retained · stored CVE-2019-11043 → product-323efd260a3034fd5a801fc0892ece9f9134f88683f3fd325c7ee2fdc93956fd195e206b-a28f-45c8-8585-4c98c86b96e52d137001-3509-4ca9-9b33-c33911d3aa944db891dc-0000-49de-8b04-3af55af2f800a1a84f29-b6c9-4061-b1bb-e6614ef939f5c9ce593c-ebfb-4d57-952e-066ebed8fc70fb811a8c-e1c9-4ee8-88cc-a8ab3429155f
has vulnerable target scope2 retained · stored CVE-2019-11043 → product-3ccb4bc87dfae98fa2f2a06435fe5b3d9be78572fb958a89f2d7a96b4066447e6736a48f-f44d-442d-9da3-12ee51e46b9eebe51d36-9fd6-41db-bfaf-f6530129e34a
has vulnerable target scope1 retained · stored CVE-2019-11043 → product-5b647cbf10edba654fbfb5f3617b5887cae2cdbd5242317dd9286e31cb74c0781c89fbdd-8e68-4934-8d78-edadad039ff7
has vulnerable target scope4 retained · stored CVE-2019-11043 → product-7120df83a9b73aae2817084ac2070ecc7d1fbfcada23076a424824e660688aae2da3a252-c1a1-4f8d-a718-a52a7376a1f2782e6452-97ef-4d0c-a507-22b2a2bc1a54eaa82e60-c173-4f45-af68-f051f4c218b0f8619c57-85b0-49a1-9c3b-b575758455b0
has cited scope1 retained · stored CVE-2019-11043 → product:7e530a684289a01ac90651d6030dc28aef7f25da-72be-4022-9ea4-9010da841040
has vulnerable target scope6 retained · stored CVE-2019-11043 → product-8abf8d7f0342f690712d750b6cf7fbf4068eb0134c40a51c5b57b074f81c6378138b0bea-75fc-448d-a90a-9434546a9aed160a94ef-1c83-4db0-8643-e8d2bceed99544665ebb-fed5-49fc-bf79-7f5fa666e244ba3a0fa5-3a14-4052-b68a-e7702d00d5d9d1d101b4-9058-4387-a479-bda80ac9183ed50352a8-86d7-45e8-9a2d-542d0e00148e
has vulnerable target scope2 retained · stored CVE-2019-11043 → product-8db20157ede2f731f576213a7e555a24d2424bb17aed8e43ad9b77c3587f9dea16aed0ef-a405-4c6b-9511-c3f443a8226b8187a2d2-8550-4a36-ba64-fe2778780038
has vulnerable target scope1 retained · stored CVE-2019-11043 → product-9ff3bc0adcc5343851d69d4a833815e08f0c8d24134495b38f50fdf38d2f17b27bff4709-898c-486f-8c7d-47c358499857
has vulnerable target scope6 retained · stored CVE-2019-11043 → product-a18840e4673d48e569064752e9575849e99b3f173c63d7c965c4c193bcaebef237762d3a-1ef2-4abe-992c-27de4dec676f432fc8b2-1d89-4eee-9039-34a92ae09b865cc8beee-f34c-4747-be64-b6fe9eb5c0f890a8d171-a5c2-4d9a-a789-8ab14aa12459ce5ae33a-514c-4ced-993a-66060dcb36d1ee4a52dc-68fd-4371-aa7a-0de2171d3d18
has vulnerable target scope2 retained · stored CVE-2019-11043 → product-b2aa744c9fb2b4ef0e3b842acbf37879ad4ac43af291292cfb0906170b204ab9952076e0-f7c3-4b23-87b7-0b8d663f1178f5e477e4-26f2-4b1d-8d57-2e8e1cbf2745
has vulnerable target scope5 retained · stored CVE-2019-11043 → product-bc6ac9f1e87a668175a638bad6013a05d2210c8abe7977a8f8f0948257ba71da8cf35ac1-4413-4d8f-bbe7-150616bb53889ef4e6c4-db1d-4a24-9b48-5b1b4f00bcd7cc6c49a7-1f0f-4d2c-9a47-335b087882b7f0d63698-a80d-4f62-bce8-c934cf3c36eefb4c525b-e66d-473a-a8cc-2989d81d9347
has vulnerable target scope1 retained · stored CVE-2019-11043 → product-c09e1a6c06a60f75d4f5a3a91108bcb8e8b7418b4d0bcbe56608e9eba3cd934bc34dee3e-8396-4329-ada3-43393410358e
has vulnerable target scope3 retained · stored CVE-2019-11043 → product-c96c7662a6606ed7594747da3d7ba9ee3a9758ab11658f6a3f42616361472e473dc8c346-4ea8-4e45-b794-398e59fd37c660771006-df33-460e-ae6c-7e4f847f07eca1adf185-74ea-4c00-b03b-919e88748224
has vulnerable target scope1 retained · stored CVE-2019-11043 → product-ca784b1cfa46e7693787bdfda9b774a55e292d3cbfbb2944f6927553fd92cf5de2c2a9f7-a1ec-4e50-9f48-90efb9b38cf0
has vulnerable target scope2 retained · stored CVE-2019-11043 → product-d01c6ee0421fbc3321008543c2e5581950beffd4af6868b9a4ce0cf3d25d94292e1f2c8b-5ffb-4122-895d-97049fa62fa073024011-15c8-4275-b04a-4bde83c2d30e
has vulnerable target scope1 retained · stored CVE-2019-11043 → product-d22fc88b6b85afc426c8220428110aecfb39a59d3b7ddf5757cf39cb9f5feb2fceeea91b-e9ea-42c7-932b-624b58a887e2
has vulnerable target scope3 retained · stored CVE-2019-11043 → product-e6438e3fdd6f4fab833b9e95f3122542080fe89ddf2636dd7eb83d66f8118f1512303f75-3bb1-455d-9107-319fcc71cefb95f516ff-dd75-4623-a93d-fc08d03b8d50e5f10ecc-efed-4b80-921f-339eef287cf6
has vulnerable target scope2 retained · stored CVE-2019-11043 → product-ebce605e64c58caa7df6a30e91702332cd8c0be8f801e44353e6350e913ec5ae6148990f-102a-49f0-a8dc-93dfcb566e21b5dc44f7-a3f8-49ca-9d1e-2bccfa1a0c46
has vulnerable target scope1 retained · stored CVE-2019-11043 → product-ec20120153af988d42a6a2dfd3cdd9595762b35581f66014faaa4f85d8f844ee5e45cc4b-004c-48f3-a830-475942b7f7af
has vulnerable target scope3 retained · stored CVE-2019-11043 → product-fab9230751e41d94860bfa2eaae4ca0e74c5c60f58631aa282686d100ad4fa0b19bababe-0f46-4501-88c3-4f23c3be089b3c606690-f6b0-4435-8c02-24eec360708f5c57291d-4323-4578-b86a-8d3303167f87
has vulnerable target scope2 retained · stored CVE-2019-11043 → product-fd0893ef7253031c8ee72effb6fcc65181f9b3f5e01f8f48b6a6ab89a31380a96f7748e0-45cf-44bb-a5e3-554e34f04565a893cf2f-f229-4d8f-bd1d-92e1c05a5c31