Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UAF failed, exiting #5

Open
joseaguardia opened this issue Oct 15, 2020 · 2 comments
Open

UAF failed, exiting #5

joseaguardia opened this issue Oct 15, 2020 · 2 comments

Comments

@joseaguardia
Copy link

Hi!

I get an "UAF failed, exiting." error, with Apache 2.4.18 and PHP 7.0.4.

Thanks!

CARPE (DIEM) ~ CVE-2019-0211

PID: 6498
Fetching addresses
  zend_object_std_dtor: 0x7f3b41351f80
  system: 0x7f3b44212390
  libaprX: 0x7f3b447b4000-0x0x7f3b447e5000
  libaprR: 0x7f3b449e4000-0x0x7f3b449e5000
  shm: 0x7f3b44f7e000-0x0x7f3b44f91000
  apache: 0x7f3b44fd2000-0x0x7f3b450a2000

Obtaining apache workers PIDs
  Found apache worker: 2280
  Found apache worker: 2576
  Found apache worker: 6495
  Found apache worker: 6496
  Found apache worker: 6497
  Found apache worker: 6498
  Found apache worker: 6500
  Found apache worker: 7296
  Found apache worker: 7437
Got 9 PIDs.

Triggering UAF
  Creating room and filling empty spaces
  Allocating $abc and $p
  Unsetting both variables and setting $protector
  Creating DateInterval object
UAF failed, exiting.
test@test:/var/www/html$ php -v
php -v
PHP 7.0.4-7ubuntu2 (cli) ( NTS )
Copyright (c) 1997-2016 The PHP Group
Zend Engine v3.0.0, Copyright (c) 1998-2016 Zend Technologies
    with Zend OPcache v7.0.6-dev, Copyright (c) 1999-2016, by Zend Technologies
test@test:/var/www/html$ apache2ctl -v
apache2ctl -v
Server version: Apache/2.4.18 (Ubuntu)
Server built:   2016-04-15T18:00:57
@A1vinSmith
Copy link

Same but in different versions
PHP 7.2.24-0ubuntu0.18.04.7 (cli) (built: Oct 7 2020 15:24:25) ( NTS )

@A1vinSmith
Copy link

Okay, by making assumptions only. It might just mean the server been patched already.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants