Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2019-11043 — HIGH severity vulnerability | Release Alert

CVE-2019-11043

8.7

HIGHCVSS v3

Published

October 28, 2019

CVSS v2

7.5 HIGH

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

NPM

>= 7.1.0, < 7.1.33, >= 7.2.0, < 7.2.24, >= 7.3.0, < 7.3.11NVD

Crates.ioRust bindings for the PHP runtime

>= 7.1.0, < 7.1.33, >= 7.2.0, < 7.2.24, >= 7.3.0, < 7.3.11NVD

NPM

More on this CVE

NVD↗GitHub Advisory↗

Allows you to run PHP code in Node.js in various ways.

>= 7.1.0, < 7.1.33, >= 7.2.0, < 7.2.24, >= 7.3.0, < 7.3.11NVD

Python Package IndexHandle some of the strange standards in PHP projects

>= 7.1.0, < 7.1.33, >= 7.2.0, < 7.2.24, >= 7.3.0, < 7.3.11NVD

Crates.ioBase library for interacting with Fedora web services

= 29, = 30, = 31NVD

Docker HubOfficial Docker builds of Fedora

= 29, = 30, = 31NVD

NPMDigital Repository Ireland - fedora backend operations

= 29, = 30, = 31NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 29, = 30, = 31NVD