جزئیات آسیب‌پذیری
CVE-2019-11043
بهره‌برداری فعال
php php
Underflow in PHP-FPM can lead to RCE
CVSS 3.1
8.7بالا
نمای کلی
اکسپلویت‌های عمومی
اخبار مرتبط
خط زمانی
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.7بالا | 3.1 | CVEProject cvelistV5 (CNA) (php) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| php | php | 7.1.x ≤ v < 7.1.33 | CVEProject cvelistV5 (CNA) |
| php | php | 7.2.x ≤ v < 7.2.24 | CVEProject cvelistV5 (CNA) |
| php | php | 7.3.x ≤ v < 7.3.11 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲۸- https://github.com/neex/phuip-fpizdam x_refsource_MISC
- https://bugs.php.net/bug.php?id=78599 x_refsource_CONFIRM
- https://usn.ubuntu.com/4166-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.debian.org/security/2019/dsa-4552 vendor-advisoryx_refsource_DEBIAN
- https://www.debian.org/security/2019/dsa-4553 vendor-advisoryx_refsource_DEBIAN
- https://usn.ubuntu.com/4166-2/ vendor-advisoryx_refsource_UBUNTU
- https://support.f5.com/csp/article/K75408500?utm_source=f5support&%3Butm_medium=RSS x_refsource_CONFIRM
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T62LF4ZWVV7OMMIZFO6IFO5QLZKK7YRD/ vendor-advisoryx_refsource_FEDORA
- https://security.netapp.com/advisory/ntap-20191031-0003/ x_refsource_CONFIRM
- https://access.redhat.com/errata/RHSA-2019:3286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3287 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3299 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3300 vendor-advisoryx_refsource_REDHAT
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W23TP6X4H7LB645FYZLUPNIRD5W3EPU/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FSNBUSPKMLUHHOADROKNG5GDWDCRHT5M/ vendor-advisoryx_refsource_FEDORA
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00011.html vendor-advisoryx_refsource_SUSE
- https://access.redhat.com/errata/RHSA-2019:3724 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3735 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2019:3736 vendor-advisoryx_refsource_REDHAT
- https://www.synology.com/security/advisory/Synology_SA_19_36 x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00014.html vendor-advisoryx_refsource_SUSE
- https://support.apple.com/kb/HT210919 x_refsource_CONFIRM
- https://seclists.org/bugtraq/2020/Jan/44 mailing-listx_refsource_BUGTRAQ
- http://seclists.org/fulldisclosure/2020/Jan/40 mailing-listx_refsource_FULLDISC
- https://access.redhat.com/errata/RHSA-2020:0322 vendor-advisoryx_refsource_REDHAT
- http://packetstormsecurity.com/files/156642/PHP-FPM-7.x-Remote-Code-Execution.html x_refsource_MISC
- https://www.tenable.com/security/tns-2021-14 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11043 government-resource
اطلاعات
- تاریخ انتشار
- ۱۳۹۸/۰۸/۰۶
- آخرین به‌روزرسانی
- ۱۴۰۴/۰۷/۳۰
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- php
- اولویت کلون
- به‌زودی
فهرست KEV آژانس CISA
- تاریخ افزوده‌شدن
- ۱۴۰۱/۰۱/۰۵
- مهلت رفع
- ۱۴۰۱/۰۱/۲۶
- استفاده در باج‌افزار
- بله
پیش‌بینی بهره‌برداری (EPSS)
۹۹٫۷۸٪
احتمال بهره‌برداری در ۳۰ روز
۹۹٫۹٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- Automatable
- no
- Exploitation
- active
- Technical Impact
- total
ضعف‌ها (CWE)
- CWE-120Buffer Overflow