CVE-2023-52892

2024-06-2722:15:10

Debian Security Bug Tracker

security-tracker.debian.org

phpseclib

tls certificates

subject alternative name

x.509 certificate host verification

security vulnerability

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.

OSVersionArchitecturePackageVersionFilename
Debian12allphp-phpseclib<= 2.0.42-1+deb12u2php-phpseclib_2.0.42-1+deb12u2_all.deb
Debian11allphp-phpseclib<= 2.0.30-2+deb11u2php-phpseclib_2.0.30-2+deb11u2_all.deb
Debian999allphp-phpseclib< 2.0.46-1php-phpseclib_2.0.46-1_all.deb
Debian13allphp-phpseclib< 2.0.46-1php-phpseclib_2.0.46-1_all.deb
Debian12allphp-phpseclib3<= 3.0.19-1+deb12u3php-phpseclib3_3.0.19-1+deb12u3_all.deb
Debian999allphp-phpseclib3< 3.0.33-1php-phpseclib3_3.0.33-1_all.deb
Debian13allphp-phpseclib3< 3.0.33-1php-phpseclib3_3.0.33-1_all.deb
Debian12allphpseclib<= 1.0.20-1+deb12u2phpseclib_1.0.20-1+deb12u2_all.deb
Debian11allphpseclib<= 1.0.19-3+deb11u2phpseclib_1.0.19-3+deb11u2_all.deb
Debian999allphpseclib< 1.0.22-1phpseclib_1.0.22-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	php-phpseclib	<= 2.0.42-1+deb12u2	php-phpseclib_2.0.42-1+deb12u2_all.deb
Debian	11	all	php-phpseclib	<= 2.0.30-2+deb11u2	php-phpseclib_2.0.30-2+deb11u2_all.deb
Debian	999	all	php-phpseclib	< 2.0.46-1	php-phpseclib_2.0.46-1_all.deb
Debian	13	all	php-phpseclib	< 2.0.46-1	php-phpseclib_2.0.46-1_all.deb
Debian	12	all	php-phpseclib3	<= 3.0.19-1+deb12u3	php-phpseclib3_3.0.19-1+deb12u3_all.deb
Debian	999	all	php-phpseclib3	< 3.0.33-1	php-phpseclib3_3.0.33-1_all.deb
Debian	13	all	php-phpseclib3	< 3.0.33-1	php-phpseclib3_3.0.33-1_all.deb
Debian	12	all	phpseclib	<= 1.0.20-1+deb12u2	phpseclib_1.0.20-1+deb12u2_all.deb
Debian	11	all	phpseclib	<= 1.0.19-3+deb11u2	phpseclib_1.0.19-3+deb11u2_all.deb
Debian	999	all	phpseclib	< 1.0.22-1	phpseclib_1.0.22-1_all.deb

Rows per page:

1-10 of 111