CISA description
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.
CVE-2019-11043 Ransomware
PHP · FastCGI Process Manager (FPM)
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
Required action
Apply updates per vendor instructions.
Notes & references
Where this lands in 800-53
Vulnerability data triggers these controls during assessment and continuous monitoring.