CVE-2023-49316

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-49316
In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f Patch
https://github.com/phpseclib/phpseclib/releases/tag/3.0.34 Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:phpseclib:phpseclib:*:*:*:*:*:*:*:*
History

01 Dec 2023, 20:54

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
First Time Phpseclib
Phpseclib phpseclib
References () https://github.com/phpseclib/phpseclib/releases/tag/3.0.34 - () https://github.com/phpseclib/phpseclib/releases/tag/3.0.34 - Release Notes
References () https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f - () https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f - Patch
CPE cpe:2.3:a:phpseclib:phpseclib:*:*:*:*:*:*:*:*
CWE CWE-834

30 Nov 2023, 04:15

Type Values Removed Values Added
Summary In Math/BinaryField.php in phpseclib before 3.0.34, excessively large degrees can lead to a denial of service. In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

27 Nov 2023, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-11-27 18:15

Updated : 2023-12-10 15:26

NVD link : CVE-2023-49316

Mitre link : CVE-2023-49316

CVE.ORG link : CVE-2023-49316

JSON object : View

Products Affected

phpseclib

  • phpseclib
CWE
CWE-834

Excessive Iteration