Submit #110: PHP-FPM env_path_info underflow in fpm_main.c can lead to RCE
| Title | PHP-FPM env_path_info underflow in fpm_main.c can lead to RCE |
|---|---|
| Description | CVE-2019-11043 Bug Description: https://bugs.php.net/bug.php?id=78599 Fixed in PHP 7.1.33: https://www.php.net/ChangeLog-7.php#7.1.33 Exploit: PHuiP-FPizdaM - https://github.com/neex/phuip-fpizdam |
| User | misc (UID 3) |
| Submission | 10/26/2019 13:56 (7 years ago) |
| Moderation | 10/26/2019 15:59 (2 hours later) |
| Status | Accepted |
| VulDB entry | 144231 [PHP up to 7.1.32 FPM fpm_main.c env_path_info Underflow out-of-bounds write] |
| Points | 13 |