Read the docs
Red Hat Security Advisory

RHSA-2019:3736

php:7.3 security update

Released 2019-11-06 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

TI-2019-08259 CVE-2019-11043 · GHSA-6qjm-m8fp-j2mm

Underflow in PHP-FPM can lead to RCE

Priority CRITICAL 100KEV

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI pro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99783 Published 2019-10-28 Fixed in 7.1.33, 7.2.24 +1 CWE-120