p PatchFirst

CVE-2023-52892

CVE-2023-52892

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.

CVSS 7.5 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • php-phpseclib Debian:12

    Versions
    • 2.0.42-1
    • 2.0.42-1+deb12u1
    • 2.0.42-1+deb12u2
    Affected ranges
    • ECOSYSTEM: < 2.0.42-1+deb12u3

    Update to 2.0.42-1+deb12u3

  • php-phpseclib Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.46-1

    Update to 2.0.46-1

  • php-phpseclib Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.46-1

    Update to 2.0.46-1

  • php-phpseclib3 Debian:12

    Versions
    • 3.0.19-1
    • 3.0.19-1+deb12u1
    • 3.0.19-1+deb12u2
    • 3.0.19-1+deb12u3
    Affected ranges
    • ECOSYSTEM: < 3.0.19-1+deb12u4

    Update to 3.0.19-1+deb12u4

  • php-phpseclib3 Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.0.33-1

    Update to 3.0.33-1

  • php-phpseclib3 Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.0.33-1

    Update to 3.0.33-1

  • phpseclib Debian:12

    Versions
    • 1.0.20-1
    • 1.0.20-1+deb12u1
    • 1.0.20-1+deb12u2
    Affected ranges
    • ECOSYSTEM: < 1.0.20-1+deb12u3

    Update to 1.0.20-1+deb12u3

  • phpseclib Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.22-1

    Update to 1.0.22-1

  • phpseclib/phpseclib Packagist

    Versions
    • 0.3.0
    • 0.3.1
    • 0.3.10
    • 0.3.5
    • 0.3.6
    • 0.3.7
    • 0.3.8
    • 0.3.9
    • 1.0.0
    • 1.0.1
    • 1.0.10
    • 1.0.11
    • 1.0.12
    • 1.0.13
    • 1.0.14
    • 1.0.15
    • 1.0.16
    • 1.0.17
    • 1.0.18
    • 1.0.19
    • 1.0.2
    • 1.0.20
    • 1.0.21
    • 1.0.3
    • 1.0.4
    • 1.0.5
    • 1.0.6
    • 1.0.7
    • 1.0.8
    • 1.0.9
    Affected ranges
    • ECOSYSTEM: < 1.0.22

    Update to 1.0.22

  • phpseclib/phpseclib Packagist

    Versions
    • 2.0.0
    • 2.0.1
    • 2.0.10
    • 2.0.11
    • 2.0.12
    • 2.0.13
    • 2.0.14
    • 2.0.15
    • 2.0.16
    • 2.0.17
    • 2.0.18
    • 2.0.19
    • 2.0.2
    • 2.0.20
    • 2.0.21
    • 2.0.22
    • 2.0.23
    • 2.0.24
    • 2.0.25
    • 2.0.26
    • 2.0.27
    • 2.0.28
    • 2.0.29
    • 2.0.3
    • 2.0.30
    • 2.0.31
    • 2.0.32
    • 2.0.33
    • 2.0.34
    • 2.0.35
    • 2.0.36
    • 2.0.37
    • 2.0.38
    • 2.0.39
    • 2.0.4
    • 2.0.40
    • 2.0.41
    • 2.0.42
    • 2.0.43
    • 2.0.44
    • 2.0.45
    • 2.0.5
    • 2.0.6
    • 2.0.7
    • 2.0.8
    • 2.0.9
    Affected ranges
    • ECOSYSTEM: ≥ 2.0.0, < 2.0.46

    Update to 2.0.46

  • phpseclib/phpseclib Packagist

    Versions
    • 3.0.0
    • 3.0.1
    • 3.0.10
    • 3.0.11
    • 3.0.12
    • 3.0.13
    • 3.0.14
    • 3.0.15
    • 3.0.16
    • 3.0.17
    • 3.0.18
    • 3.0.19
    • 3.0.2
    • 3.0.20
    • 3.0.21
    • 3.0.22
    • 3.0.23
    • 3.0.3
    • 3.0.4
    • 3.0.5
    • 3.0.6
    • 3.0.7
    • 3.0.8
    • 3.0.9
    Affected ranges
    • ECOSYSTEM: ≥ 3.0.0, < 3.0.33

    Update to 3.0.33

  • php-phpseclib Ubuntu:Pro:16.04:LTS

    Versions
    • 2.0.1-1
    • 2.0.1-1build1
    Affected ranges
    • ECOSYSTEM: < 2.0.1-1ubuntu0.1~esm2

    Update to 2.0.1-1ubuntu0.1~esm2

  • phpseclib Ubuntu:Pro:16.04:LTS

    Versions
    • 0.3.10-3
    • 1.0.0-2
    • 1.0.0-3
    • 1.0.1-1
    • 1.0.1-3
    • 1.0.1-3ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 1.0.1-3ubuntu0.1+esm1

    Update to 1.0.1-3ubuntu0.1+esm1

  • php-phpseclib Ubuntu:Pro:18.04:LTS

    Versions
    • 2.0.6-1
    • 2.0.7-1
    • 2.0.9-1
    Affected ranges
    • ECOSYSTEM: < 2.0.9-1ubuntu0.1~esm2

    Update to 2.0.9-1ubuntu0.1~esm2

  • phpseclib Ubuntu:Pro:18.04:LTS

    Versions
    • 1.0.7-1
    • 1.0.8-1
    • 1.0.9-1
    Affected ranges
    • ECOSYSTEM: < 1.0.9-1ubuntu0.1~esm1

    Update to 1.0.9-1ubuntu0.1~esm1

  • php-phpseclib Ubuntu:Pro:20.04:LTS

    Versions
    • 2.0.21-2
    • 2.0.23-2
    Affected ranges
    • ECOSYSTEM: < 2.0.23-2ubuntu0.1~esm2

    Update to 2.0.23-2ubuntu0.1~esm2

  • phpseclib Ubuntu:Pro:20.04:LTS

    Versions
    • 1.0.16-2
    • 1.0.18-2
    Affected ranges
    • ECOSYSTEM: < 1.0.18-2ubuntu0.1~esm1

    Update to 1.0.18-2ubuntu0.1~esm1

  • phpseclib Ubuntu:22.04:LTS

    Versions
    • 1.0.19-3ubuntu2
    • 1.0.19-3ubuntu3
    • 1.0.20-1
    Affected ranges
    • ECOSYSTEM: < 1.0.20-1+deb12u3build0.22.04.1

    Update to 1.0.20-1+deb12u3build0.22.04.1

  • php-phpseclib Ubuntu:Pro:22.04:LTS

    Versions
    • 2.0.30-2ubuntu1
    • 2.0.34-1
    • 2.0.35-1
    • 2.0.36-1
    Affected ranges
    • ECOSYSTEM: < 2.0.36-1ubuntu0.1~esm2

    Update to 2.0.36-1ubuntu0.1~esm2

  • php-phpseclib3 Ubuntu:Pro:22.04:LTS

    Versions
    • 3.0.9-1
    • 3.0.10-1
    • 3.0.12-2
    • 3.0.13-1
    Affected ranges
    • ECOSYSTEM: < 3.0.13-1ubuntu0.1~esm1

    Update to 3.0.13-1ubuntu0.1~esm1

  • phpseclib Ubuntu:Pro:22.04:LTS

    Versions
    • 1.0.19-3ubuntu2
    • 1.0.19-3ubuntu3
    • 1.0.20-1
    Affected ranges
    • ECOSYSTEM: < 1.0.20-1ubuntu0.1~esm1

    Update to 1.0.20-1ubuntu0.1~esm1

Original sources

Check your server →