p PatchFirst

CVE-2024-27354

CVE-2024-27354

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.

CVSS 7.5 · High · EPSS 0.6% · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • php-phpseclib Debian:12

    Versions
    • 2.0.42-1
    • 2.0.42-1+deb12u1
    Affected ranges
    • ECOSYSTEM: < 2.0.42-1+deb12u2

    Update to 2.0.42-1+deb12u2

  • php-phpseclib Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.0.47-1

    Update to 2.0.47-1

  • php-phpseclib Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.0.47-1

    Update to 2.0.47-1

  • php-phpseclib3 Debian:12

    Versions
    • 3.0.19-1
    • 3.0.19-1+deb12u1
    • 3.0.19-1+deb12u2
    Affected ranges
    • ECOSYSTEM: < 3.0.19-1+deb12u3

    Update to 3.0.19-1+deb12u3

  • php-phpseclib3 Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.0.36-1

    Update to 3.0.36-1

  • php-phpseclib3 Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.0.36-1

    Update to 3.0.36-1

  • phpseclib Debian:12

    Versions
    • 1.0.20-1
    • 1.0.20-1+deb12u1
    Affected ranges
    • ECOSYSTEM: < 1.0.20-1+deb12u2

    Update to 1.0.20-1+deb12u2

  • phpseclib Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.23-1

    Update to 1.0.23-1

  • phpseclib/phpseclib Packagist

    Versions
    • 0.3.0
    • 0.3.1
    • 0.3.10
    • 0.3.5
    • 0.3.6
    • 0.3.7
    • 0.3.8
    • 0.3.9
    • 1.0.0
    • 1.0.1
    • 1.0.10
    • 1.0.11
    • 1.0.12
    • 1.0.13
    • 1.0.14
    • 1.0.15
    • 1.0.16
    • 1.0.17
    • 1.0.18
    • 1.0.19
    • 1.0.2
    • 1.0.20
    • 1.0.21
    • 1.0.22
    • 1.0.3
    • 1.0.4
    • 1.0.5
    • 1.0.6
    • 1.0.7
    • 1.0.8
    • 1.0.9
    Affected ranges
    • ECOSYSTEM: ≥ 0.1.1, < 1.0.23

    Update to 1.0.23

  • phpseclib/phpseclib Packagist

    Versions
    • 2.0.0
    • 2.0.1
    • 2.0.10
    • 2.0.11
    • 2.0.12
    • 2.0.13
    • 2.0.14
    • 2.0.15
    • 2.0.16
    • 2.0.17
    • 2.0.18
    • 2.0.19
    • 2.0.2
    • 2.0.20
    • 2.0.21
    • 2.0.22
    • 2.0.23
    • 2.0.24
    • 2.0.25
    • 2.0.26
    • 2.0.27
    • 2.0.28
    • 2.0.29
    • 2.0.3
    • 2.0.30
    • 2.0.31
    • 2.0.32
    • 2.0.33
    • 2.0.34
    • 2.0.35
    • 2.0.36
    • 2.0.37
    • 2.0.38
    • 2.0.39
    • 2.0.4
    • 2.0.40
    • 2.0.41
    • 2.0.42
    • 2.0.43
    • 2.0.44
    • 2.0.45
    • 2.0.46
    • 2.0.5
    • 2.0.6
    • 2.0.7
    • 2.0.8
    • 2.0.9
    Affected ranges
    • ECOSYSTEM: ≥ 2.0.0, < 2.0.47

    Update to 2.0.47

  • phpseclib/phpseclib Packagist

    Versions
    • 3.0.0
    • 3.0.1
    • 3.0.10
    • 3.0.11
    • 3.0.12
    • 3.0.13
    • 3.0.14
    • 3.0.15
    • 3.0.16
    • 3.0.17
    • 3.0.18
    • 3.0.19
    • 3.0.2
    • 3.0.20
    • 3.0.21
    • 3.0.22
    • 3.0.23
    • 3.0.3
    • 3.0.33
    • 3.0.34
    • 3.0.35
    • 3.0.4
    • 3.0.5
    • 3.0.6
    • 3.0.7
    • 3.0.8
    • 3.0.9
    Affected ranges
    • ECOSYSTEM: ≥ 3.0.0, < 3.0.36

    Update to 3.0.36

  • php-phpseclib Ubuntu:Pro:16.04:LTS

    Versions
    • 2.0.1-1
    • 2.0.1-1build1
    Affected ranges
    • ECOSYSTEM: < 2.0.1-1ubuntu0.1~esm2

    Update to 2.0.1-1ubuntu0.1~esm2

  • phpseclib Ubuntu:Pro:16.04:LTS

    Versions
    • 0.3.10-3
    • 1.0.0-2
    • 1.0.0-3
    • 1.0.1-1
    • 1.0.1-3
    • 1.0.1-3ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 1.0.1-3ubuntu0.1+esm1

    Update to 1.0.1-3ubuntu0.1+esm1

  • php-phpseclib Ubuntu:Pro:18.04:LTS

    Versions
    • 2.0.6-1
    • 2.0.7-1
    • 2.0.9-1
    Affected ranges
    • ECOSYSTEM: < 2.0.9-1ubuntu0.1~esm2

    Update to 2.0.9-1ubuntu0.1~esm2

  • phpseclib Ubuntu:Pro:18.04:LTS

    Versions
    • 1.0.7-1
    • 1.0.8-1
    • 1.0.9-1
    Affected ranges
    • ECOSYSTEM: < 1.0.9-1ubuntu0.1~esm1

    Update to 1.0.9-1ubuntu0.1~esm1

  • php-phpseclib Ubuntu:Pro:20.04:LTS

    Versions
    • 2.0.21-2
    • 2.0.23-2
    Affected ranges
    • ECOSYSTEM: < 2.0.23-2ubuntu0.1~esm2

    Update to 2.0.23-2ubuntu0.1~esm2

  • phpseclib Ubuntu:Pro:20.04:LTS

    Versions
    • 1.0.16-2
    • 1.0.18-2
    Affected ranges
    • ECOSYSTEM: < 1.0.18-2ubuntu0.1~esm1

    Update to 1.0.18-2ubuntu0.1~esm1

  • phpseclib Ubuntu:22.04:LTS

    Versions
    • 1.0.19-3ubuntu2
    • 1.0.19-3ubuntu3
    • 1.0.20-1
    Affected ranges
    • ECOSYSTEM: < 1.0.20-1+deb12u3build0.22.04.1

    Update to 1.0.20-1+deb12u3build0.22.04.1

  • php-phpseclib Ubuntu:Pro:22.04:LTS

    Versions
    • 2.0.30-2ubuntu1
    • 2.0.34-1
    • 2.0.35-1
    • 2.0.36-1
    Affected ranges
    • ECOSYSTEM: < 2.0.36-1ubuntu0.1~esm2

    Update to 2.0.36-1ubuntu0.1~esm2

  • php-phpseclib3 Ubuntu:Pro:22.04:LTS

    Versions
    • 3.0.9-1
    • 3.0.10-1
    • 3.0.12-2
    • 3.0.13-1
    Affected ranges
    • ECOSYSTEM: < 3.0.13-1ubuntu0.1~esm1

    Update to 3.0.13-1ubuntu0.1~esm1

  • phpseclib Ubuntu:Pro:22.04:LTS

    Versions
    • 1.0.19-3ubuntu2
    • 1.0.19-3ubuntu3
    • 1.0.20-1
    Affected ranges
    • ECOSYSTEM: < 1.0.20-1ubuntu0.1~esm1

    Update to 1.0.20-1ubuntu0.1~esm1

Original sources

Check your server →