ALL PHP Vulnerable to Glib-C Exploit - CVE-2024-2961 - Please Update Immediately
Words
110
Reading
1 min
Listen
Play
2y
The LAMP stack turns out to have an ancient bug that was thought to be harmless, but turns out to enable system takeover. The Web runs on Linux, and PHP is what most websites are written in today, so this vulnerability that enables a buffer overflow when translating character sets, specifically CN, or certain characters of the CN character set, basically renders every web server 'All your base are belong to us.'
Openwall.com has more and specific information, but MentalOutlaw states that an upcoming conference in May will likely provide a fuller explanation.
There is said to be a hotfix available, so please update without delay.