Lucene search
+L

322 matches found

Friends Of PHP
Friends Of PHP
•added 2023/11/27 6:31 p.m.•37 views

phpseclib vulnerable to denial of service

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2f25-pfq3-c7h8. This link is maintained to preserve external references. Original Description In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees in binary fields can lead to a denial...

7.5CVSS7AI score0.00783EPSS
SaveExploits0Affected Software1
osv-ghsa
osv-ghsa
•added 2023/11/27 6:31 p.m.•35 views

GHSA-JPR7-Q523-HX25 Duplicate Advisory: phpseclib vulnerable to denial of service

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2f25-pfq3-c7h8. This link is maintained to preserve external references. Original Description In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees in binary fields can lead to a denial...

7.5CVSS7AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2023/11/27 6:31 p.m.•54 views

Duplicate Advisory: phpseclib vulnerable to denial of service

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2f25-pfq3-c7h8. This link is maintained to preserve external references. Original Description In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees in binary fields can lead to a denial...

7.5CVSS7AI score0.00783EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2023/11/27 6:15 p.m.•3 views

DEBIAN-CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.5CVSS7.3AI score0.00783EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/27 6:15 p.m.•12 views

CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.5CVSS5.8AI score0.00783EPSS
SaveExploits0References3
NVD
NVD
•added 2023/11/27 6:15 p.m.•27 views

CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.5CVSS0.00783EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/11/27 6:15 p.m.•28 views

CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.5CVSS7.1AI score0.00783EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/27 6:15 p.m.•18 views

UBUNTU-CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.5CVSS5.8AI score0.00783EPSS
SaveExploits0References4
Prion
Prion
•added 2023/11/27 6:15 p.m.•19 views

Design/Logic Flaw

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

5CVSS6.9AI score0.00783EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/11/27 12:00 a.m.•21 views

Terrafrost phpseclib Security Vulnerabilities

Terrafrost phpseclib is a Terrafrost open source application. pure PHP implementation under the MIT license. A security vulnerability exists in Terrafrost phpseclib versions prior to 3.0.34, which stems from a Denial of Service DOS vulnerability in the file Math/BinaryField.php...

7.5CVSS6.7AI score0.00783EPSS
SaveExploits0References2
Mend
Mend
•added 2023/11/27 12:00 a.m.•2 views

CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

8.7CVSS0.00783EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2023/11/27 12:00 a.m.•6 views

PT-2023-31165

Name of the Vulnerable Software and Affected Versions phpseclib versions 3.0.0 through 3.0.33 Description The issue arises from excessively large degrees in binary fields, which can lead to a denial of service. This occurs in the Math/BinaryField.php file of the phpseclib library. Recommendations...

7.5CVSS7.1AI score0.00783EPSS
SaveExploits0References17
CVE
CVE
•added 2023/11/27 12:00 a.m.•106 views

CVE-2023-49316

CVE-2023-49316 affects phpseclib 3.x prior to 3.0.34, where excessively large degrees in the Math/BinaryField.php implementation can lead to a denial of service. The published fix is in PHPseclib 3.0.34 (see release/commit references). The vulnerability is a DoS condition with network attack vect...

7.5CVSS7.2AI score0.00783EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/11/27 12:00 a.m.•33 views

CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.5AI score0.00783EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2023/11/27 12:00 a.m.•44 views

CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.5CVSS7.3AI score0.00783EPSS
SaveExploits0
OSV
OSV
•added 2023/11/27 12:00 a.m.•28 views

CVE-2023-49316

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service...

7.4AI score
SaveExploits0References4
NVD
NVD
•added 2023/09/05 10:15 p.m.•25 views

CVE-2023-30534

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory phpseclib, the necessary gadgets are not included, making them inaccessible an...

4.3CVSS4.9AI score0.02869EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/09/05 10:15 p.m.•43 views

CVE-2023-30534

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory phpseclib, the necessary gadgets are not included, making them inaccessible an...

4.3CVSS6.7AI score0.02869EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/05 9:21 p.m.•54 views

CVE-2023-30534 Insecure Deserialization in Cacti

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory phpseclib, the necessary gadgets are not included, making them inaccessible an...

4.3CVSS7.2AI score0.02869EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
•added 2023/09/05 9:21 p.m.•60 views

CVE-2023-30534

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory phpseclib, the necessary gadgets are not included, making them inaccessible an...

4.3CVSS7AI score0.02869EPSS
SaveExploits1References5
Rows per page
Query Builder