Serious bug in PHP reported!

[RJARRRPCGP]

I just saw this:

 

[W1zzard]

How about a link to a textual representation of the issue? https://nvd.nist.gov/vuln/detail/CVE-2024-2961

Seems the problem is glibc, not PHP

| Garrett Mills

 

[RJARRRPCGP]

How about a link to a textual representation of the issue? https://nvd.nist.gov/vuln/detail/CVE-2024-2961

Seems the problem is glibc, not PHP

| Garrett Mills

Yes, I didn't say that the origin is actually glibc, mea culpa.

Currently, it looks like glibc <2.40 is affected.

But, Garrett Mills reports <2.39, so a bunch possibly avoided a "web-site-mageddon".

I saw this:

CVE Website

www.cve.org

Even that one still says <2.40!

 

[W1zzard]

I also doubt that many people are using this specific Chinese encoding .. we certainly don't

For shared hosting where you can upload your own PHP code, this could be interesting though, assuming they run their PHP as root, not in a container, which no sane host should ever do