9 ms·
The Log4j Vulnerability Will Haunt the Internet for Years
- bediger4000 5y agoIs the log4j vulnerability any worse in terms of potential length of consequences than 2014's Shellshock (https://en.wikipedia.org/wiki/Shellshock_(software_bug) https://en.wikipedia.org/wiki/Shellshock_(software_bug)), or the PHP-run-as-CGI bug (https://www.praetorian.com/blog/php-cgi-remote-command-execution-vulnerability-exploitation/ https://www.praetorian.com/blog/php-cgi-remote-command-execu...)? Both of those were extremely widespread, but active exploitation seems to have died out. I'm sure that the occasional abandoned WordPress VPS falls prey to the PHP-as-CGI problem, but these "ubiquitous" vulnerabilities tend to get used up pretty quickly.