Comment by elmer2

While the PHP vulnerability is big news and needs to be patched, it's not that easy to exploit.

All of the POCs I found have hard coded memory addresses for the heap overflow and won't work for many versions out-of-the-box.