Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-27560
HistoryMar 03, 2023 - 6:15 a.m.

CVE-2023-27560

2023-03-0306:15:08
CWE-835
[email protected]
web.nvd.nist.gov
3
phpseclib 3.x
vulnerability
infinite loop
math/primefield.php
composite primefields

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.1%

JSON

Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.

Affected configurations

Nvd
Node
phpseclibphpseclibRange3.0.0–3.0.19
VendorProductVersionCPE
phpseclibphpseclib*cpe:2.3:a:phpseclib:phpseclib:*:*:*:*:*:*:*:*

Related

cve 2
veracode 1
prion 2
github 2
osv 4
debiancve 2
ubuntucve 2
cvelist 2
friendsofphp 2
vulnrichment 1
nvd 1
nessus 2
debian 2
cve
cve
CVE-2023-27560
2023-03-03 06:15:08
CVE-2024-27354
2024-03-01 23:15:08
veracode
veracode
Denial Of Service (DoS)
2023-03-04 16:14:03
prion
prion
Information disclosure
2023-03-03 06:15:00
Design/Logic Flaw
2024-03-01 23:15:00
github
github
phpseclib Infinite Loop vulnerability
2023-03-03 06:30:17
phpseclib a large prime can cause a denial of service
2024-03-02 00:31:33
osv
osv
phpseclib Infinite Loop vulnerability
2023-03-03 06:30:17
CVE-2023-27560
2023-03-03 06:15:08
phpseclib a large prime can cause a denial of service
2024-03-02 00:31:33
debiancve
debiancve
CVE-2023-27560
2023-03-03 06:15:08
CVE-2024-27354
2024-03-01 23:15:08
ubuntucve
ubuntucve
CVE-2023-27560
2023-03-03 00:00:00
CVE-2024-27354
2024-03-01 00:00:00
cvelist
cvelist
CVE-2023-27560
2023-03-03 00:00:00
CVE-2024-27354
2024-03-01 00:00:00
friendsofphp
friendsofphp
Infinite Loop vulnerability
2023-03-06 09:20:00
phpseclib a large prime can cause a denial of service
2024-03-02 00:31:33
vulnrichment
vulnrichment
CVE-2024-27354
2024-03-01 00:00:00
nvd
nvd
CVE-2024-27354
2024-03-01 23:15:08
nessus
nessus
Debian dla-3750 : php-phpseclib - security update
2024-03-05 00:00:00
Debian dla-3749 : php-seclib - security update
2024-03-05 00:00:00
debian
debian
[SECURITY] [DLA 3749-1] phpseclib security update
2024-03-05 13:57:39
[SECURITY] [DLA 3750-1] php-phpseclib security update
2024-03-05 13:57:51

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.1%

JSON
Related for NVD:CVE-2023-27560
cve2veracode1prion2github2osv4debiancve2ubuntucve2cvelist2friendsofphp2vulnrichment1nvd1nessus2debian2