CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.
Remediation Deadline: Apr 15, 2022
Description
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.
EPSS — Exploit Probability
94.1%
Higher than 99.9% of all CVEs
Required Action
https://nvd.nist.gov/vuln/detail/CVE-2019-11043
Risk Assessment
CRITICALIn CISA KEV
High EPSS
Ransomware
Details
- Severity
- High
- EPSS
- 94.1%
- CISA KEV
- Yes
- Ransomware
- Known
- Articles
- 0
Timeline
Published
Mar 25, 2022
Added to KEV
Mar 25, 2022
Remediation Due
Apr 15, 2022