Conversation

What this tells us is exploitation requires knowledge of:

1. PHP version
2. Reasonable address spaces for the heap
3. PHP worker count
4. Exact offsets for all of the above

Blind attacks are highly likely to fail unless allowed to continue for some time.

Oh yeah and this is all mod_php. None of this works the same way against PHP-FPM.