CVE-2019-11043

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Php

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

28. Okt 2019

Ausgewertete Quellen

• Apple
  https://support.apple.com/kb/HT210919
• Debian
  https://www.debian.org/security/2019/dsa-4552
• Debian
  https://www.debian.org/security/2019/dsa-4553
• Red Hat
  https://access.redhat.com/errata/RHSA-2019:3286
• Red Hat
  https://access.redhat.com/errata/RHSA-2019:3287
• Red Hat
  https://access.redhat.com/errata/RHSA-2019:3299
• Red Hat
  https://access.redhat.com/errata/RHSA-2019:3300
• Red Hat
  https://access.redhat.com/errata/RHSA-2019:3724
• Red Hat
  https://access.redhat.com/errata/RHSA-2019:3735
• Red Hat
  https://access.redhat.com/errata/RHSA-2019:3736
• Red Hat
  https://access.redhat.com/errata/RHSA-2020:0322
• Ubuntu
  https://usn.ubuntu.com/4166-1/
• Ubuntu
  https://usn.ubuntu.com/4166-2/
• Hersteller
  https://bugs.php.net/bug.php?id=78599
• Hinweis
  http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html
• Hinweis
  http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html
• Hinweis
  http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html
• Hinweis
  http://seclists.org/fulldisclosure/2020/Jan/40
• Hinweis
  https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/
• Hinweis
  https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/
• Hinweis
  https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/
• Hinweis
  https://seclists.org/bugtraq/2020/Jan/44
• Hinweis
  https://security.netapp.com/advisory/ntap-20191031-0003/
• Hinweis
  https://support.f5.com/csp/article/K75408500?utm_source=f5support&amp%3Butm_medium=RSS
• Hinweis
  https://www.synology.com/security/advisory/Synology_SA_19_36
• Hinweis
  https://www.tenable.com/security/tns-2021-14
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11043
• CISA
  PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
• NVD
  CVE-2019-11043
• GitHub
  https://github.com/neex/phuip-fpizdam