https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:37:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-232443 EUVD-2026-232443 https://cve.radiocsirt.org/vuln/euvd-2026-232443 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27354 <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.</p> <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27354 https://cve.radiocsirt.org/vuln/ghsa-2528-jw5q-ww88 <p><strong>Affected:</strong> Packagist: phpseclib/phpseclib</p> <p>### Impact Anyone trying to generate a prime and testing the primality of a number.</p> <p>### Patches https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575</p> <p>### Workarounds Using the GMP extension would probably help, assuming that one has its own guardrails.</p> <p>### Resources https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575 https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-599-shi-bing.pdf</p> <p><strong>Affected:</strong> Packagist: phpseclib/phpseclib</p> <p>### Impact Anyone trying to generate a prime and testing the primality of a number.</p> <p>### Patches https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575</p> <p>### Workarounds Using the GMP extension would probably help, assuming that one has its own guardrails.</p> <p>### Resources https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575 https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-599-shi-bing.pdf</p> https://cve.radiocsirt.org/vuln/ghsa-2528-jw5q-ww88 https://cve.radiocsirt.org/vuln/gsd-2024-27354 gsd-2024-27354 https://cve.radiocsirt.org/vuln/gsd-2024-27354 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-27354 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: php-phpseclib, Ubuntu:Pro:16.04:LTS: phpseclib, Ubuntu:Pro:18.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:Pro:22.04:LTS: phpseclib</p> <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: php-phpseclib, Ubuntu:Pro:16.04:LTS: phpseclib, Ubuntu:Pro:18.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:Pro:22.04:LTS: phpseclib</p> <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-27354