317 matches found
CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...
CVE-2026-84308
phpseclib , a PHP secure communications library, has a non-constant-time X25519 scalar multiplication flaw in versions prior to 3.0.57 and 4.0.1 . The root cause is data-dependent conditional modular reductions in the pure-PHP implementation (Math/PrimeField/Integer.php), which leak per-step timi...
CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...
CVE-2026-84308
phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...
CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...
ROS-20260901-73-0026
The vulnerability in php-phpseclib is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to perform SSRF attacks remotely...
PT-2026-84455
Name of the Vulnerable Software and Affected Versions phpseclib versions prior to 3.0.57 phpseclib versions prior to 4.0.1 Description Pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in the add and subtract...
CVE-2026-84308: Observable Timing Discrepancy
phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...
[SECURITY] Fedora 44 Update: php-phpseclib-2.0.55-1.fc44
MIT-licensed pure-PHP implementations of an arbitrary-precision integer arithmetic library, fully PKCS1 v2.1 compliant RSA, DES, 3DES, RC4, Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509...
[SECURITY] Fedora 43 Update: php-phpseclib-2.0.55-1.fc43
MIT-licensed pure-PHP implementations of an arbitrary-precision integer arithmetic library, fully PKCS1 v2.1 compliant RSA, DES, 3DES, RC4, Rijndael, AES, Blowfish, Twofish, SSH-1, SSH-2, SFTP, and X.509...
Fedora 44 : php-phpseclib (2026-fac5581caa)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fac5581caa advisory. Update to v2.0.55 - contains fix for CVE-2026-44167 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...
Fedora 43 : php-phpseclib (2026-b2ce3f8e3e)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b2ce3f8e3e advisory. Update to v2.0.55 - contains fix for CVE-2026-44167 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...
CLSA-2026-1783386122 TuxCare security update for phpseclib/phpseclib (1 CVE)
TuxCare rebuilt phpseclib/phpseclib to address 1 CVE. Fixed in 0.3.10-p3+tuxcare...
CLSA-2026-1779410885 TuxCare security update for phpseclib/phpseclib (1 CVE)
TuxCare rebuilt phpseclib/phpseclib to address 1 CVE. Fixed in 0.3.10-p2+tuxcare...
CLSA-2026-1779065206 TuxCare security update for phpseclib/phpseclib (4 CVEs)
TuxCare rebuilt phpseclib/phpseclib to address 4 CVEs. Fixed in 0.3.10-p1+tuxcare...
PT-2026-74788
TuxCare rebuilt phpseclib/phpseclib to address 4 CVEs. Fixed in 0.3.10-p1+tuxcare...
PT-2026-75318
TuxCare rebuilt phpseclib/phpseclib to address 1 CVE. Fixed in 0.3.10-p3+tuxcare...
PT-2026-74845
TuxCare rebuilt phpseclib/phpseclib to address 1 CVE. Fixed in 0.3.10-p2+tuxcare...
ROS-20260727-73-0016
A vulnerability in the phpseclib cryptographic protocols library is related to information disclosure due to a timing inconsistency. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...
