{"cve":{"cve_id":"CVE-2019-11043","is_kev":true,"kev_date_added":"2022-03-25","kev_vendor_project":"PHP","kev_product":"FastCGI Process Manager (FPM)","kev_vulnerability_name":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","kev_short_description":"In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.","kev_required_action":"Apply updates per vendor instructions.","kev_due_date":"2022-04-15","kev_known_ransomware":true,"kev_notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11043","kev_cwes":["CWE-120"],"epss_score":0.9978,"epss_percentile":0.99954,"epss_as_of":"2026-08-26","description":"In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","published_at":"2019-10-28T14:19:04.252000Z","last_modified_at":null,"cvss_v3_score":8.7,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_v3_severity":"HIGH","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"active","ssvc_automatable":false,"ssvc_technical_impact":"total","cwes":["CWE-120"],"nvd_references":["https://github.com/neex/phuip-fpizdam","https://bugs.php.net/bug.php?id=78599","https://usn.ubuntu.com/4166-1/","https://www.debian.org/security/2019/dsa-4552","https://www.debian.org/security/2019/dsa-4553","https://usn.ubuntu.com/4166-2/","https://support.f5.com/csp/article/K75408500?utm_source=f5support&amp%3Butm_medium=RSS","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/","https://security.netapp.com/advisory/ntap-20191031-0003/","https://access.redhat.com/errata/RHSA-2019:3286","https://access.redhat.com/errata/RHSA-2019:3287","https://access.redhat.com/errata/RHSA-2019:3299","https://access.redhat.com/errata/RHSA-2019:3300","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html","https://access.redhat.com/errata/RHSA-2019:3724","https://access.redhat.com/errata/RHSA-2019:3735","https://access.redhat.com/errata/RHSA-2019:3736","https://www.synology.com/security/advisory/Synology_SA_19_36","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html","https://support.apple.com/kb/HT210919","https://seclists.org/bugtraq/2020/Jan/44","http://seclists.org/fulldisclosure/2020/Jan/40","https://access.redhat.com/errata/RHSA-2020:0322","http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html","https://www.tenable.com/security/tns-2021-14"],"vuln_status":null,"trending_score":0.599604,"is_trending":true,"has_trended":true,"trended_number_one":false,"trending_peak_score":0.599604,"trending_peak_rank":3,"started_trending_at":"2026-08-25T19:37:50.390885Z","trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:31.350578Z","updated_at":"2026-08-27T17:44:58.711341Z"},"effective_severity":"HIGH","badges":["kev","ransomware","exploit","trending","epss"],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"H","value_label":"High"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"C","value_label":"Changed"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"php","vendor_name":"php","product_slug":"php","product_name":"php","version_start":"7.1.x","version_start_inclusive":true,"version_end":"7.1.33","version_end_inclusive":false,"cpe23_uri":"cve5:php:php:7.1.x:7.1.33"},{"vendor_slug":"php","vendor_name":"php","product_slug":"php","product_name":"php","version_start":"7.2.x","version_start_inclusive":true,"version_end":"7.2.24","version_end_inclusive":false,"cpe23_uri":"cve5:php:php:7.2.x:7.2.24"},{"vendor_slug":"php","vendor_name":"php","product_slug":"php","product_name":"php","version_start":"7.3.x","version_start_inclusive":true,"version_end":"7.3.11","version_end_inclusive":false,"cpe23_uri":"cve5:php:php:7.3.x:7.3.11"}],"exploit_refs":[{"source":"exploit-db","kind":"exploit-db","url":"https://www.exploit-db.com/exploits/48182","title":"PHP-FPM - Underflow Remote Code Execution (Metasploit)","author":"Metasploit","disclosed_at":"2020-03-09"},{"source":"exploit-db","kind":"exploit-db","url":"https://www.exploit-db.com/exploits/47553","title":"PHP-FPM + Nginx - Remote Code Execution","author":"Emil Lerner","disclosed_at":"2019-10-28"},{"source":"nuclei","kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11043.yaml","title":"PHP-FPM Path Info Buffer Underflow - Remote Code Execution","author":"Prasath from Securin Labs (https://securin.io)","disclosed_at":null}],"news":[],"references":[{"url":"https://github.com/neex/phuip-fpizdam","source_type":"MISC","tags":[]},{"url":"https://bugs.php.net/bug.php?id=78599","source_type":"MISC","tags":[]},{"url":"https://usn.ubuntu.com/4166-1/","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4552","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4553","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://usn.ubuntu.com/4166-2/","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://support.f5.com/csp/article/K75408500?utm_source=f5support&amp%3Butm_medium=RSS","source_type":"MISC","tags":[]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://security.netapp.com/advisory/ntap-20191031-0003/","source_type":"MISC","tags":[]},{"url":"https://access.redhat.com/errata/RHSA-2019:3286","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3287","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3299","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3300","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3724","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3735","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3736","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_36","source_type":"MISC","tags":[]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://support.apple.com/kb/HT210919","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://seclists.org/bugtraq/2020/Jan/44","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2020/Jan/40","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0322","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html","source_type":"EXPLOIT","tags":["exploit"]},{"url":"https://www.tenable.com/security/tns-2021-14","source_type":"MISC","tags":[]}],"timeline":[{"type":"exploit_known","at":"2019-10-28T00:00:00Z","label":"Public exploit available","source":"exploit-db"},{"type":"published","at":"2019-10-28T14:19:04.252000Z","label":"CVE published","source":null},{"type":"cisa_reported","at":"2022-03-25T00:00:00Z","label":"Added to CISA KEV catalog","source":"kev"},{"type":"ssvc_changed","at":"2026-06-24T00:31:17.516004Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-24T00:31:17.516004Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-24T00:31:17.516004Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:17.516004Z","label":"CVSS score revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:17.516004Z","label":"CVSS score revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-06-24T00:31:17.516004Z","label":"CVSS score revised","source":"vulnrichment"},{"type":"poc_available","at":"2026-08-25T19:35:20.264041Z","label":"Public PoC available","source":"nuclei"},{"type":"started_trending","at":"2026-08-25T19:37:50.390885Z","label":"Started trending","source":null}]}