New Nginx Exploit | Hacker News

A Hacker News discussion says the new Nginx exploit should not be treated as harmless just because it does not yet bypass ASLR.

Commenters note that an ASLR bypass may still be feasible, so the underlying vulnerability remains serious.

The takeaway is that mitigations reduce risk, but they do not replace patching the root flaw in Nginx.