← Back to context Comment by bombcar 13 hours ago Amusingly enough restarting php after each request seems to block the issue 4 comments bombcar Reply SoftTalker 12 hours ago If true then classic CGI mode should not be vulnerable, but apparently it is. quotemstr 11 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 10 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
SoftTalker 12 hours ago If true then classic CGI mode should not be vulnerable, but apparently it is. quotemstr 11 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 10 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
quotemstr 11 hours ago Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it? SoftTalker 10 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
SoftTalker 10 hours ago Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Maybe just CYA. 1 reply →
If true then classic CGI mode should not be vulnerable, but apparently it is.
Is it? How? Yes, you can get longjmp to do invalid things, but with an ASLR reset each attempt, can you exploit it?
Not sure how, but from the announcement: Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.
Maybe just CYA.
1 reply →