CVE-2023-52892

2024-06-2700:00:00

ubuntu.com

phpseclib

tls certificates

x.509 certificate host verification

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some
characters in Subject Alternative Name fields in TLS certificates are
incorrectly allowed to have a special meaning in regular expressions (such
as a + wildcard), leading to name confusion in X.509 certificate host
verification.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchphp-phpseclib< anyUNKNOWN
ubuntu20.04noarchphp-phpseclib< anyUNKNOWN
ubuntu22.04noarchphp-phpseclib< anyUNKNOWN
ubuntu23.10noarchphp-phpseclib< anyUNKNOWN
ubuntu16.04noarchphp-phpseclib< anyUNKNOWN
ubuntu22.04noarchphp-phpseclib3< anyUNKNOWN
ubuntu23.10noarchphp-phpseclib3< anyUNKNOWN
ubuntu18.04noarchphpseclib< anyUNKNOWN
ubuntu20.04noarchphpseclib< anyUNKNOWN
ubuntu22.04noarchphpseclib< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	20.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	22.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	23.10	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	16.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	22.04	noarch	php-phpseclib3	< any	UNKNOWN
ubuntu	23.10	noarch	php-phpseclib3	< any	UNKNOWN
ubuntu	18.04	noarch	phpseclib	< any	UNKNOWN
ubuntu	20.04	noarch	phpseclib	< any	UNKNOWN
ubuntu	22.04	noarch	phpseclib	< any	UNKNOWN