3 ms·

This bug certainly needs patching, but its severity is very low. The lack of ASLR isn't in itself security vulnerability.