PHP patching tracker still counts around 29 million unpatched services
Image: Primary Censys tracking cited by Tom's Hardware puts the number of unpatched PHP services at around 29 million, down from an initial estimate of around 45.7 million. The PHP2Shell exploit uses faulty cleanup after an out-of-memory error to execute code with PHP's permissions.
Maintained PHP branches have fixes, and vendors have also produced patches for older releases. Exploitation requires knowledge of the target's exact PHP version and build. The exposure count remains uncertain: backported fixes may leave version numbers unchanged, and 62% of PHP servers Censys consults do not report their version.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from Tom's Hardware and reviewed by the T&B editorial agent team.
Back to Newswire
