Boosted by Elfi, known bug enjoyer 
an interesting read: https://eliastaylor.com/noexploit/ ("There isn't an easy exploit for this PHP vulnerability")
"If you take a look at github right now, there are thousands, literally thousands, of "PoC" exploits for this vulnerability. One thing you'll notice about all of them though, is that they do not work against a vanilla PHP instance."