CVE-2024-27354

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate co...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-27354 php-phpseclib Corrigé dans: 2.0.30-2+deb11u2
Ubuntu UBUNTU-CVE-2024-27354 php-phpseclib Corrigé dans: 2.0.1-1ubuntu0.1~esm2

Références

advisory github.com
advisory nvd.nist.gov
web gist.github.com
web github.com
web lists.debian.org
web lists.debian.org