Read the docs
TI-2019-08259 Aliases CVE-2019-11043GHSA-6qjm-m8fp-j2mm

Underflow in PHP-FPM can lead to RCE

Priority CRITICAL 100Exploited in the wildCWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-120 and the CVSS impact.

Summary

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

Why it matters now

Exploitation Active In CISA KEV since 2022-03-25CISA due date 2022-04-15Known ransomware use
EPSS 0.99783 99th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix Fixed PHP (PHP): 7.1.33, 7.2.24, 7.3.11Red Hat: 9 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PHPPHP7.1.x to before 7.1.33; 7.2.x to before 7.2.24; 7.3.x to before 7.3.117.1.33, 7.2.24, 7.3.11Patch availableCNA
  • PHP VendorPHP Affected 7.1.x to before 7.1.33; 7.2.x to before 7.2.24; 7.3.x to before 7.3.11 Fixed in 7.1.33, 7.2.24, 7.3.11 Patch available CNA

CPE configurations NVD · 64

CPEVersionsRoleVendor
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*7.1.0 to before 7.1.33; 7.2.0 to before 7.2.24; 7.3.0 to before 7.3.11VulnerablePHP
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*19.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*19.10VulnerableCanonical
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*29VulnerableFedoraproject
  • cpe:2.3:a:php:php:*:*:*:*:*:*:*:* Versions 7.1.0 to before 7.1.33; 7.2.0 to before 7.2.24; 7.3.0 to before 7.3.11 Vulnerable ·PHP
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* Versions 19.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* Versions 19.10 Vulnerable ·Canonical
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* Versions 29 Vulnerable ·Fedoraproject
Show 54 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*30VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*31VulnerableFedoraproject
cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*before 5.19.0VulnerableTenable
cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*1.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*8.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*8.0_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.1_aarch64:*:*:*:*:*:*:*8.1_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.2_aarch64:*:*:*:*:*:*:*8.2_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.4_aarch64:*:*:*:*:*:*:*8.4_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:*8.6_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*8.8_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*6.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*7.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*8.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:*7.7_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1_s390x:*:*:*:*:*:*:*8.1_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2_s390x:*:*:*:*:*:*:*8.2_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4_s390x:*:*:*:*:*:*:*8.4_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:*8.6_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*8.8_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*6.0_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*7.0_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*7.7_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:*7.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*8.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:*7.7_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1_ppc64le:*:*:*:*:*:*:*8.1_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2_ppc64le:*:*:*:*:*:*:*8.2_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4_ppc64le:*:*:*:*:*:*:*8.4_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:*8.6_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*8.8_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* Versions 31 Vulnerable ·Fedoraproject
  • cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* Versions before 5.19.0 Vulnerable ·Tenable
  • cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:* Versions 8.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.1_aarch64:*:*:*:*:*:*:* Versions 8.1_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.2_aarch64:*:*:*:*:*:*:* Versions 8.2_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.4_aarch64:*:*:*:*:*:*:* Versions 8.4_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.6_aarch64:*:*:*:*:*:*:* Versions 8.6_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:* Versions 8.8_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:* Versions 6.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:* Versions 7.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:* Versions 7.7_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1_s390x:*:*:*:*:*:*:* Versions 8.1_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2_s390x:*:*:*:*:*:*:* Versions 8.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4_s390x:*:*:*:*:*:*:* Versions 8.4_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.6_s390x:*:*:*:*:*:*:* Versions 8.6_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* Versions 8.8_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:* Versions 6.0_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:* Versions 7.0_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:* Versions 7.7_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:* Versions 7.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:* Versions 7.7_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1_ppc64le:*:*:*:*:*:*:* Versions 8.1_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2_ppc64le:*:*:*:*:*:*:* Versions 8.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4_ppc64le:*:*:*:*:*:*:* Versions 8.4_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.6_ppc64le:*:*:*:*:*:*:* Versions 8.6_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* Versions 8.8_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat

Remediation

  • Fix · CNA PHP (PHP) Fixed in 7.1.33, 7.2.24, 7.3.11

Red Hat 9 advisories

  • RHSA-2020:2835 Released 2020-07-07 · Red Hat rating Critical
    php security update
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) php-5.4.16-46.1.el7_6, php-bcmath-5.4.16-46.1.el7_6, php-cli-5.4.16-46.1.el7_6 +22
    • Red Hat Enterprise Linux Server EUS (v. 7.6) php-5.4.16-46.1.el7_6, php-cli-5.4.16-46.1.el7_6, php-common-5.4.16-46.1.el7_6 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.6) php-bcmath-5.4.16-46.1.el7_6, php-dba-5.4.16-46.1.el7_6, php-devel-5.4.16-46.1.el7_6 +8
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) php-5.4.16-46.1.el7_6, php-cli-5.4.16-46.1.el7_6, php-common-5.4.16-46.1.el7_6 +11
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) php-bcmath-5.4.16-46.1.el7_6, php-dba-5.4.16-46.1.el7_6, php-devel-5.4.16-46.1.el7_6 +8
  • RHSA-2020:0322 Released 2020-02-03 · Red Hat rating Critical
    php:7.2 security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.0) apcu-panel-5.1.12-1.module+el8+2561+1aca3413.noarch::php:7.2, libzip-1.5.1-1.module+el8+2561+1aca3413.ppc64le::php:7.2, libzip-1.5.1-1.module+el8+2561+1aca3413.src::php:7.2 +47
  • RHSA-2019:3736 Released 2019-11-06 · Red Hat rating Critical
    php:7.3 security update
    • Red Hat Enterprise Linux AppStream (v. 8) apcu-panel-5.1.17-1.module+el8.1.0+3189+a1bff096.noarch::php:7.3, libzip-1.5.2-1.module+el8.1.0+3189+a1bff096.aarch64::php:7.3, libzip-1.5.2-1.module+el8.1.0+3189+a1bff096.ppc64le::php:7.3 +47
Show 6 more Red Hat advisories
  • RHSA-2019:3735 Released 2019-11-06 · Red Hat rating Critical
    php:7.2 security update
    • Red Hat Enterprise Linux AppStream (v. 8) apcu-panel-5.1.12-2.module+el8.1.0+3202+af5476b9.noarch::php:7.2, libzip-1.5.1-2.module+el8.1.0+3202+af5476b9.aarch64::php:7.2, libzip-1.5.1-2.module+el8.1.0+3202+af5476b9.ppc64le::php:7.2 +47
  • RHSA-2019:3724 Released 2019-11-06 · Red Hat rating Critical
    rh-php70-php security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-php70-php-7.0.27-2.el6, rh-php70-php-bcmath-7.0.27-2.el6, rh-php70-php-cli-7.0.27-2.el6 +28
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-php70-php-7.0.27-2.el7, rh-php70-php-bcmath-7.0.27-2.el7, rh-php70-php-cli-7.0.27-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-php70-php-7.0.27-2.el7, rh-php70-php-bcmath-7.0.27-2.el7, rh-php70-php-cli-7.0.27-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-php70-php-7.0.27-2.el7, rh-php70-php-bcmath-7.0.27-2.el7, rh-php70-php-cli-7.0.27-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-php70-php-7.0.27-2.el7, rh-php70-php-bcmath-7.0.27-2.el7, rh-php70-php-cli-7.0.27-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-php70-php-7.0.27-2.el6, rh-php70-php-bcmath-7.0.27-2.el6, rh-php70-php-cli-7.0.27-2.el6 +28
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-php70-php-7.0.27-2.el7, rh-php70-php-bcmath-7.0.27-2.el7, rh-php70-php-cli-7.0.27-2.el7 +26
  • RHSA-2019:3300 Released 2019-11-01 · Red Hat rating Critical
    rh-php71-php security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-php71-php-7.1.30-2.el7, rh-php71-php-bcmath-7.1.30-2.el7, rh-php71-php-cli-7.1.30-2.el7 +26
  • RHSA-2019:3299 Released 2019-11-01 · Red Hat rating Critical
    rh-php72-php security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-php72-php-7.2.24-1.el7, rh-php72-php-bcmath-7.2.24-1.el7, rh-php72-php-cli-7.2.24-1.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-php72-php-7.2.24-1.el7, rh-php72-php-bcmath-7.2.24-1.el7, rh-php72-php-cli-7.2.24-1.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-php72-php-7.2.24-1.el7, rh-php72-php-bcmath-7.2.24-1.el7, rh-php72-php-cli-7.2.24-1.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-php72-php-7.2.24-1.el7, rh-php72-php-bcmath-7.2.24-1.el7, rh-php72-php-cli-7.2.24-1.el7 +26
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-php72-php-7.2.24-1.el7, rh-php72-php-bcmath-7.2.24-1.el7, rh-php72-php-cli-7.2.24-1.el7 +26
  • RHSA-2019:3286 Released 2019-10-31 · Red Hat rating Critical
    php security update
    • Red Hat Enterprise Linux Client Optional (v. 7) php-5.4.16-46.1.el7_7, php-bcmath-5.4.16-46.1.el7_7, php-cli-5.4.16-46.1.el7_7 +22
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) php-5.4.16-46.1.el7_7, php-bcmath-5.4.16-46.1.el7_7, php-cli-5.4.16-46.1.el7_7 +22
    • Red Hat Enterprise Linux Server (v. 7) php-5.4.16-46.1.el7_7, php-cli-5.4.16-46.1.el7_7, php-common-5.4.16-46.1.el7_7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) php-bcmath-5.4.16-46.1.el7_7, php-dba-5.4.16-46.1.el7_7, php-devel-5.4.16-46.1.el7_7 +8
    • Red Hat Enterprise Linux Workstation (v. 7) php-5.4.16-46.1.el7_7, php-cli-5.4.16-46.1.el7_7, php-common-5.4.16-46.1.el7_7 +11
    • Red Hat Enterprise Linux Workstation Optional (v. 7) php-bcmath-5.4.16-46.1.el7_7, php-dba-5.4.16-46.1.el7_7, php-devel-5.4.16-46.1.el7_7 +8
  • RHSA-2019:3287 Released 2019-10-31 · Red Hat rating Critical
    php security update
    • Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-50.el6_10, php-bcmath-5.3.3-50.el6_10, php-cli-5.3.3-50.el6_10 +24
    • Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-50.el6_10, php-cli-5.3.3-50.el6_10, php-common-5.3.3-50.el6_10
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-50.el6_10, php-bcmath-5.3.3-50.el6_10, php-dba-5.3.3-50.el6_10 +22
    • Red Hat Enterprise Linux Server (v. 6) php-5.3.3-50.el6_10, php-cli-5.3.3-50.el6_10, php-common-5.3.3-50.el6_10 +9
    • Red Hat Enterprise Linux Server Optional (v. 6) php-bcmath-5.3.3-50.el6_10, php-dba-5.3.3-50.el6_10, php-devel-5.3.3-50.el6_10 +12
    • Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-50.el6_10, php-cli-5.3.3-50.el6_10, php-common-5.3.3-50.el6_10 +9
    • Red Hat Enterprise Linux Workstation Optional (v. 6) php-bcmath-5.3.3-50.el6_10, php-dba-5.3.3-50.el6_10, php-devel-5.3.3-50.el6_10 +12

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2019:3735, RHSA-2019:3736
Red Hat Enterprise Linux AppStream E4S (v. 8.0)Fixed RHSA-2020:0322
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2019:3286
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2019:3286
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)Fixed RHSA-2020:2835
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2019:3287
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2019:3287
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2019:3287
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2019:3287
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2019:3286
Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2020:2835
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2019:3287
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2019:3286
Red Hat Enterprise Linux Server Optional EUS (v. 7.6)Fixed RHSA-2020:2835
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2019:3287
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2019:3286
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2019:3287
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2019:3286
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2020:2835
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2020:2835
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2019:3724
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2019:3299, RHSA-2019:3300, RHSA-2019:3724
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)Fixed RHSA-2019:3299, RHSA-2019:3300, RHSA-2019:3724
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2019:3299, RHSA-2019:3300, RHSA-2019:3724
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)Fixed RHSA-2019:3299, RHSA-2019:3300, RHSA-2019:3724
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2019:3724
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2019:3299, RHSA-2019:3300, RHSA-2019:3724
Not affected: 2 products
  • Red Hat Enterprise Linux 5
  • Red Hat Software Collections

Timeline

  1. 2022-03-25 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2019-11043
  3. 2026-10-03 Alias added: GHSA-6qjm-m8fp-j2mm

References

Exploit 3

Advisory 24

  • TI-2024-04260 Argument Injection in PHP-CGI KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-01607 sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI… KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-78794 PHP remote code execution via stale global state KEVCVSS 4.0CRITICAL 9.2
  • TI-2026-78793 Out-of-memory handling flaw in PHP allows remote code execution KEVCVSS 4.0CRITICAL 9.2
  • TI-2015-00205 Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and… CVSS 2.0HIGH 10.0
  • TI-2018-05487 In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through… CVSS 3.0CRITICAL 9.8
See all 739 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences