{"schema_version":"2","view":"grouped","data":[{"id":2697,"cve_ids":["CVE-2019-11043"],"payload":{"kind":"advisory","title":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","summary":"In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11043","products":[{"name":{"value":"FastCGI Process Manager (FPM)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11043","aliases":["CVE-2019-11043"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-120"],"cveID":"CVE-2019-11043","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11043","dueDate":"2022-04-15","product":"FastCGI Process Manager (FPM)","dateAdded":"2022-03-25","vendorProject":"PHP","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.","vulnerabilityName":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-11043","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:25e3bdcd-0db7-4eda-9b55-5f1d5a066401","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11043","advisory_id":"25e3bdcd-0db7-4eda-9b55-5f1d5a066401","event_types":["advisory"],"published_at":"2026-10-24T21:23:23.230872+00:00","technologies":["core-kev","fastcgi-process-manager-fpm"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/advisories/advisory%3A25e3bdcd-0db7-4eda-9b55-5f1d5a066401","group":{"id":"advisory:25e3bdcd-0db7-4eda-9b55-5f1d5a066401","revision":1,"primary_event_id":2706,"change":"published","superseded_by":[],"changed":{"id":2706,"cve_ids":["CVE-2019-11043"],"payload":{"kind":"advisory","title":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","summary":"In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11043","products":[{"name":{"value":"FastCGI Process Manager (FPM)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11043","aliases":["CVE-2019-11043"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-120"],"cveID":"CVE-2019-11043","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11043","dueDate":"2022-04-15","product":"FastCGI Process Manager (FPM)","dateAdded":"2022-03-25","vendorProject":"PHP","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.","vulnerabilityName":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-11043","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:25e3bdcd-0db7-4eda-9b55-5f1d5a066401","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11043","advisory_id":"25e3bdcd-0db7-4eda-9b55-5f1d5a066401","event_types":["advisory"],"published_at":"2026-10-24T21:23:23.230872+00:00","technologies":["core-kev","fastcgi-process-manager-fpm"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/events/2706"},"members":[{"id":2706,"cve_ids":["CVE-2019-11043"],"payload":{"kind":"advisory","title":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","summary":"In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11043","products":[{"name":{"value":"FastCGI Process Manager (FPM)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11043","aliases":["CVE-2019-11043"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-120"],"cveID":"CVE-2019-11043","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11043","dueDate":"2022-04-15","product":"FastCGI Process Manager (FPM)","dateAdded":"2022-03-25","vendorProject":"PHP","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.","vulnerabilityName":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-11043","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:25e3bdcd-0db7-4eda-9b55-5f1d5a066401","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11043","advisory_id":"25e3bdcd-0db7-4eda-9b55-5f1d5a066401","event_types":["advisory"],"published_at":"2026-10-24T21:23:23.230872+00:00","technologies":["core-kev","fastcgi-process-manager-fpm"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/events/2706"}]}}],"next_after":2697,"next_before":2697}