CVE-2019-11043

01/תיאור (מקור, אנגלית)

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

02/מוצרים מושפעים

php: php; canonical: ubuntu linux; debian: debian linux; fedoraproject: fedora; tenable: tenable.sc; redhat: software collections; redhat: enterprise linux; redhat: enterprise linux desktop; redhat: enterprise linux eus; redhat: enterprise linux eus compute node; redhat: enterprise linux for arm 64; redhat: enterprise linux for arm 64 eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power big endian

03/קישורים10

• bugs.php.net/bug.php?id=78599 ExploitIssue TrackingPatchVendor Advisory
• bugs.php.net/bug.php?id=78599 ExploitIssue TrackingPatchVendor Advisory
• packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-E‮… ExploitThird Party AdvisoryVDB Entry
• github.com/neex/phuip-fpizdam ExploitThird Party Advisory
• packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-E‮… ExploitThird Party AdvisoryVDB Entry
• github.com/neex/phuip-fpizdam ExploitThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2019-11/msg00011‮… Mailing ListThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2019-11/msg00014‮… Mailing ListThird Party Advisory
• seclists.org/fulldisclosure/2020/Jan/40 Mailing ListThird Party Advisory
• access.redhat.com/errata/RHSA-2019:3286 Third Party Advisory