← Back to context Comment by bombcar 9 hours ago Amusingly enough restarting php after each request seems to block the issue 4 comments bombcar Reply SoftTalker 8 hours ago If true then classic CGI mode should not be vulnerable, but apparently it is. quotemstr 7 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 7 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
SoftTalker 8 hours ago If true then classic CGI mode should not be vulnerable, but apparently it is. quotemstr 7 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 7 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
quotemstr 7 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 7 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
SoftTalker 7 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
If true then classic CGI mode should not be vulnerable, but apparently it is.
Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it?
Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.
Maybe just CYA.
1 reply →