CVE-2023-27560

2023-03-0306:15:08

Debian Security Bug Tracker

security-tracker.debian.org

phpseclib 3.x

math/primefield.php

infinite loop

vulnerability

composite primefields

cve-2023-27560

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.1%

JSON

Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.

OSVersionArchitecturePackageVersionFilename
Debian12allphp-phpseclib3< 3.0.19-1php-phpseclib3_3.0.19-1_all.deb
Debian999allphp-phpseclib3< 3.0.19-1php-phpseclib3_3.0.19-1_all.deb
Debian13allphp-phpseclib3< 3.0.19-1php-phpseclib3_3.0.19-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	php-phpseclib3	< 3.0.19-1	php-phpseclib3_3.0.19-1_all.deb
Debian	999	all	php-phpseclib3	< 3.0.19-1	php-phpseclib3_3.0.19-1_all.deb
Debian	13	all	php-phpseclib3	< 3.0.19-1	php-phpseclib3_3.0.19-1_all.deb