I came across the link via https://mastodon.social/@CuratedHackerNews/117481600704689796
Last time I touched php it was ~20 years ago and maybe for a month. Could someone with actual php understanding weigh in?
Somehow, somewhere between the lines, my understanding was that there have been observances of the vuln being used in the wild before the 14 UTC. And that wasn’t from reading news sites
From the very little I’ve researched, a DoS with it isn’t hard but for RCE one needs to know some pointers inside… doable if you assume it’s Debian or something then just download a bunch of versions locally and try them. This also implies that most hardened distributions are all unaffected (because relocations) and source builds are effectively unaffected unless the binary is dumped somehow.