PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability (CVE-2019-11043)
Severity: critical · Patch status: patched · Since 2022-03-25 · CVE-2019-11043
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution. CISA added CVE-2019-11043 to its Known Exploited Vulnerabilities catalog on Mar 25, 2022, which means attackers are exploiting it in the wild. CISA reports known use in ransomware campaigns.
What to do
- Apply updates per vendor instructions.
- US federal agencies must remediate by Apr 15, 2022 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
