What this tells us is exploitation requires knowledge of:<li>PHP version</li><li>Reasonable address spaces for the heap</li><li>PHP worker count</li><li>Exact offsets for all of the above</li>
Blind attacks are highly likely to fail unless allowed to continue for some time.