Lucene search
GoogleOSV:GHSA-VF4W-FG7R-5V94HistoryApr 07, 2021 - 8:56 p.m.
Improper Certificate Validation in phpseclib
2021-04-0720:56:55
Google
osv.dev
16
phpseclib
certificate validation
rsa pkcs#1
software security
EPSS
0.003
Percentile
68.4%
phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.
References
github.com/FriendsOfPHP/security-advisories/blob/master/phpseclib/phpseclib/CVE-2021-30130.yaml
github.com/phpseclib/phpseclib/pull/1635
github.com/phpseclib/phpseclib/releases/tag/2.0.31
github.com/phpseclib/phpseclib/releases/tag/3.0.7
lists.debian.org/debian-lts-announce/2022/11/msg00024.html
lists.debian.org/debian-lts-announce/2022/11/msg00025.html
nvd.nist.gov/vuln/detail/CVE-2021-30130
Related
veracode
veracode
Insecure Cryptographic Functions
2021-04-07 06:02:13
ubuntucve
ubuntucve
CVE-2021-30130
2021-04-06 00:00:00
friendsofphp
friendsofphp
Improper Certificate Validation in phpseclib
2021-04-06 13:43:13
Improper Certificate Validation in phpseclib
2021-04-06 13:43:13
nvd
nvd
CVE-2021-30130
2021-04-06 15:15:13
cvelist
cvelist
CVE-2021-30130
2021-04-06 00:00:00
osv
osv
php-phpseclib - security update
2022-11-17 00:00:00
CVE-2021-30130
2021-04-06 15:15:13
phpseclib - security update
2022-11-17 00:00:00
debian
debian
[SECURITY] [DLA 3198-1] php-phpseclib security update
2022-11-17 16:49:59
[SECURITY] [DLA 3197-1] phpseclib security update
2022-11-17 16:49:41
prion
prion
Design/Logic Flaw
2021-04-06 15:15:00
nessus
nessus
Debian DLA-3198-1 : php-phpseclib - LTS security update
2022-11-18 00:00:00
Debian DLA-3197-1 : phpseclib - LTS security update
2022-11-18 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3198-1)
2022-11-18 00:00:00
Debian: Security Advisory (DLA-3197-1)
2022-11-18 00:00:00
cve
cve
CVE-2021-30130
2021-04-06 15:15:13
debiancve
debiancve
CVE-2021-30130
2021-04-06 15:15:13
github
github
Improper Certificate Validation in phpseclib
2021-04-07 20:56:55