CVE-2019-11043CRITICALCVSS 9.8CISA KEV: Actively Exploited

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Published Mar 25, 2022·Updated Mar 25, 2022

Description

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

Affected Packages (3)

phpOTHER
From 7.1.0
Fixed in 7.1.33
phpOTHER
From 7.2.0
Fixed in 7.2.24
phpOTHER
From 7.3.0
Fixed in 7.3.11

Public Exploits & PoCs20 found

PoC: phuip-fpizdam

Exploit for CVE-2019-11043

1,718

PoC: CVE-2019-11043

(PoC) Python version of CVE-2019-11043 exploit by neex

142

PoC: CVE-2019-11043

php-fpm+Nginx RCE

92

PoC: CVE-2019-11043

Ladon POC Moudle CVE-2019-11043 (PHP-FPM + Ngnix)

18

PoC: CVE-2019-11043

CVE-2019-11043 PHP7.x RCE

13

PoC: docker-CVE-2019-11043

Docker image and commands to check CVE-2019-11043 vulnerability on nginx/php-fpm applications.

7

PoC: CVE-2019-11043

Python exp for CVE-2019-11043

6

PoC: CVE-2019-11043

CVE-2019-11043 && PHP7.x && RCE EXP

4

PoC: PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

PHP-FPM Remote Code Execution Vulnerability (CVE-2019-11043) POC in Python

4

PoC: php_hack

CVE-2019-11043

2

PoC: CVE-2019-11043

This repository provides a dockerized infrastructure and a python implementation of the CVE-2019-11043 exploit.

2

PoC: cve-2019-11043

CVE-2019-11043 PHP远程代码执行

2

PoC: CVE-2019-11043

PHP-FPM Remote Command Execution Exploit

1

PoC: CVE-2019-11043

quick and dirty PHP RCE proof of concept

1

PoC: CVE-2019-11043_env

remote debug environment for CLion

1

PoC: CVE-2019-11043

CVE-2019-11043

1

PoC: cve-2019-11043.py

Python port of an ExploitDB proof-of-concept.

PoC: phuip-fpizdam

Exploit for CVE-2019-11043

PoC: CVE-2019-11043-

exploit for CVE-2019-11043

PoC: CVE-2019-11043

CVE-2019-11043 LAB

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free