CVE-2019-11043 PHP FastCGI Process Manager (FPM) Buffer Overflow
Remote attackers can achieve code execution via buffer underflow in PHP-FPM when specific configurations are enabled.
- Exploited in the wild
- Since 25 Mar 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-11043?
CVE-2019-11043 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 28 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
Which versions are affected by CVE-2019-11043?
It affects 23 products.
Linux distribution packages (40)
apcu-panel AlmaLinux:8 | All versions | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
apcu-panel AlmaLinux:8 | All versions | 5.1.17-1.module_el8.3.0+2009+b272fdef |
libzip AlmaLinux:8 | All versions | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
libzip AlmaLinux:8 | All versions | 1.5.1-2.module_el8.4.0+2228+7c76a223 |
libzip AlmaLinux:8 | All versions | 1.5.1-2.module_el8.5.0+53+9945c2af |
libzip AlmaLinux:8 | All versions | 1.5.2-1.module_el8.3.0+2009+b272fdef |
libzip AlmaLinux:8 | All versions | 1.5.2-1.module_el8.4.0+2229+b272fdef |
libzip AlmaLinux:8 | All versions | 1.5.2-1.module_el8.5.0+152+112d3b8c |
libzip-devel AlmaLinux:8 | All versions | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
libzip-devel AlmaLinux:8 | All versions | 1.5.1-2.module_el8.4.0+2228+7c76a223 |
libzip-devel AlmaLinux:8 | All versions | 1.5.1-2.module_el8.5.0+53+9945c2af |
libzip-devel AlmaLinux:8 | All versions | 1.5.2-1.module_el8.3.0+2009+b272fdef |
libzip-devel AlmaLinux:8 | All versions | 1.5.2-1.module_el8.4.0+2229+b272fdef |
libzip-devel AlmaLinux:8 | All versions | 1.5.2-1.module_el8.5.0+152+112d3b8c |
libzip-tools AlmaLinux:8 | All versions | 1.5.1-2.module_el8.3.0+2010+7c76a223 |
libzip-tools AlmaLinux:8 | All versions | 1.5.1-2.module_el8.4.0+2228+7c76a223 |
libzip-tools AlmaLinux:8 | All versions | 1.5.1-2.module_el8.5.0+53+9945c2af |
libzip-tools AlmaLinux:8 | All versions | 1.5.2-1.module_el8.3.0+2009+b272fdef |
libzip-tools AlmaLinux:8 | All versions | 1.5.2-1.module_el8.4.0+2229+b272fdef |
libzip-tools AlmaLinux:8 | All versions | 1.5.2-1.module_el8.5.0+152+112d3b8c |
php-pear AlmaLinux:8 | All versions | 1:1.10.5-9.module_el8.3.0+2010+7c76a223 |
php-pear AlmaLinux:8 | All versions | 1:1.10.9-1.module_el8.3.0+2009+b272fdef |
php-pecl-apcu AlmaLinux:8 | All versions | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
php-pecl-apcu AlmaLinux:8 | All versions | 5.1.12-2.module_el8.4.0+2228+7c76a223 |
php-pecl-apcu AlmaLinux:8 | All versions | 5.1.12-2.module_el8.5.0+53+9945c2af |
php-pecl-apcu AlmaLinux:8 | All versions | 5.1.17-1.module_el8.3.0+2009+b272fdef |
php-pecl-apcu AlmaLinux:8 | All versions | 5.1.17-1.module_el8.4.0+2229+b272fdef |
php-pecl-apcu AlmaLinux:8 | All versions | 5.1.17-1.module_el8.5.0+152+112d3b8c |
php-pecl-apcu-devel AlmaLinux:8 | All versions | 5.1.12-2.module_el8.3.0+2010+7c76a223 |
php-pecl-apcu-devel AlmaLinux:8 | All versions | 5.1.12-2.module_el8.4.0+2228+7c76a223 |
php-pecl-apcu-devel AlmaLinux:8 | All versions | 5.1.12-2.module_el8.5.0+53+9945c2af |
php-pecl-apcu-devel AlmaLinux:8 | All versions | 5.1.17-1.module_el8.3.0+2009+b272fdef |
php-pecl-apcu-devel AlmaLinux:8 | All versions | 5.1.17-1.module_el8.4.0+2229+b272fdef |
php-pecl-apcu-devel AlmaLinux:8 | All versions | 5.1.17-1.module_el8.5.0+152+112d3b8c |
php-pecl-zip AlmaLinux:8 | All versions | 1.15.3-1.module_el8.3.0+2010+7c76a223 |
php-pecl-zip AlmaLinux:8 | All versions | 1.15.3-1.module_el8.4.0+2228+7c76a223 |
php-pecl-zip AlmaLinux:8 | All versions | 1.15.3-1.module_el8.5.0+53+9945c2af |
php-pecl-zip AlmaLinux:8 | All versions | 1.15.4-1.module_el8.3.0+2009+b272fdef |
php-pecl-zip AlmaLinux:8 | All versions | 1.15.4-1.module_el8.4.0+2229+b272fdef |
php-pecl-zip AlmaLinux:8 | All versions | 1.15.4-1.module_el8.5.0+152+112d3b8c |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Php Php, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop and 17 more.
How do I fix CVE-2019-11043?
Upgrade to a fixed version. US federal agencies must fix it by 15 Apr 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-11043 being exploited?
Yes. Attackers have exploited CVE-2019-11043 in the wild since at least 25 Mar 2022, including in ransomware campaigns.
Public exploit code: 1 Metasploit module, 2 Exploit-DB entries, 1 Nuclei template and 27 proofs of concept on GitHub.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALSA-2019:3735, ALSA-2019:3736, DLA-1970-1, DSA-4552-1, DSA-4553-1, GHSA-6qjm-m8fp-j2mm and 19 more.