CVE-2023-52892

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incor...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2023-52892 php-phpseclib
Ubuntu UBUNTU-CVE-2023-52892 php-phpseclib Corrigé dans: 2.0.1-1ubuntu0.1~esm2

Références

advisory github.com
advisory nvd.nist.gov
package github.com
patch github.com
report github.com
web github.com