3 ms·

CVE-2021-21703 [0] is a similar class of bug in the PHP interpreter itself that was pretty recent https://www.sentinelone.com/vulnerability-database/cve-2021-2

• ipaddr 5mo ago
  This is not a PHP language interpreter bug this is a PHP FPM bug.
  • diek 5mo ago
    That's a fair point, using 'interpreter' specifically was imprecise language on my part. My main point was php-fpm is developed by the core PHP team and is often the default in how PHP projects deploy these days, and that CVE was very similar to the recent 'fail' LPE vulnerabilities in the kernel.
    • ipaddr 5mo ago
      php-mod is so fast these days