PT-2020-5322 · Php +7 · Php +7

🗓️ 17 Feb 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 25 Views

Null pointer dereference in file upload with progress tracking and zero cleanup can crash PHP and cause denial of service.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerability affects WebSphere Transformation Extender with Launcher Hypervisor Edition [for RHEL] (CVE-2015-0235)	16 Jun 201819:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java, Node.js and IBM WebSphere Application Server Liberty	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerability affects DS8000 (CVE-2015-0235)	24 May 202217:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection	16 Jun 201821:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabiltiies in PHP.	27 Jan 202016:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect's Developer Portal is impacted by vulnerabilities in PHP (CVE-2019-11035 CVE-2019-11034)	23 May 201900:15	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware (CVE-2015-0235)	31 Jan 201901:55	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerability affects IBM/Cisco Switches and Directors (CVE-2015-0235)	20 Aug 202200:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/php_fpm_rce.rb
github	www.github.com/theMiddleBlue/CVE-2019-11043
github	www.github.com/jas502n/CVE-2019-11043
github	www.github.com/akamajoris/CVE-2019-11043-Docker
github	www.github.com/k8gege/CVE-2019-11043
github	www.github.com/0th3rs-Security-Team/CVE-2019-11043
github	www.github.com/kriskhub/CVE-2019-11043
github	www.github.com/ypereirareis/docker-CVE-2019-11043
github	www.github.com/AleWong/PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-
github	www.github.com/lindemer/CVE-2019-11043

11 Aug 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5 - 9.8

CVSS 210

CVSS 35.1 - 9.8

EPSS0.99998

SSVC