Comment by bombcar 16 hours ago Amusingly enough restarting php after each request seems to block the issue 4 comments bombcar Reply SoftTalker 15 hours ago If true then classic CGI mode should not be vulnerable, but apparently it is. quotemstr 13 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 13 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
SoftTalker 15 hours ago If true then classic CGI mode should not be vulnerable, but apparently it is. quotemstr 13 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 13 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
quotemstr 13 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 13 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
SoftTalker 13 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
If true then classic CGI mode should not be vulnerable, but apparently it is.
Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it?
Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.
Maybe just CYA.
1 reply →