DEV Community

Prosspa Eternal
Prosspa Eternal

Posted on

CVE-2019-11043: In some versions of PHP in certain configurations of FPM setup

CVE-2019-11043: In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

This vulnerability allows remote code execution in affected PHP versions, posing a significant security risk to systems running PHP in FPM configurations.

Recommended action: Update to PHP versions 7.1.33, 7.2.24, 7.3.11, or 5.19.0, and ensure FPM configurations are properly secured to prevent exploitation.

Read the verified PHP brief on DevCurrent: https://devcurrent.net/cve/CVE-2019-11043?utm_source=devto&utm_medium=community&utm_campaign=editorial_distribution&utm_content=3

Top comments (0)