Skip to content
OpenAdvisories
Critical 1 exploited CVE ALSA-2019:3735 1 CVE

Critical: php:7.2 security update

Published Nov 6, 2019 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 20

ReleasePackageFixed in
AlmaLinux · 8 apcu-panel 5.1.12-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip 1.5.1-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip 1.5.1-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 libzip 1.5.1-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 libzip-devel 1.5.1-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 libzip-devel 1.5.1-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip-devel 1.5.1-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 libzip-tools 1.5.1-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 libzip-tools 1.5.1-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 libzip-tools 1.5.1-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pear 1:1.10.5-9.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pecl-apcu 5.1.12-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pecl-apcu 5.1.12-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pecl-apcu 5.1.12-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pecl-apcu-devel 5.1.12-2.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pecl-apcu-devel 5.1.12-2.module_el8.3.0+2010+7c76a223
AlmaLinux · 8 php-pecl-apcu-devel 5.1.12-2.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pecl-zip 1.15.3-1.module_el8.5.0+53+9945c2af
AlmaLinux · 8 php-pecl-zip 1.15.3-1.module_el8.4.0+2228+7c76a223
AlmaLinux · 8 php-pecl-zip 1.15.3-1.module_el8.3.0+2010+7c76a223

Vulnerabilities 1

  • High 8.7
    CVE-2019-11043 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Underflow in PHP-FPM can lead to RCE

    In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibilit…

    PHP Group PHP php5 php7.0 Ubuntu Alpine
    KEV Mar 25, 2022

References

  • report
    https://vulners.com/cve/CVE-2019-11043