https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:01:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05131 bdu:2025-05131 https://cve.radiocsirt.org/vuln/bdu:2025-05131 https://cve.radiocsirt.org/vuln/euvd-2026-158314 EUVD-2026-158314 https://cve.radiocsirt.org/vuln/euvd-2026-158314 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27355 <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).</p> <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27355 https://cve.radiocsirt.org/vuln/ghsa-f2qx-66wf-wvvx <p><strong>Affected:</strong> Packagist: phpseclib/phpseclib</p> <p>### Impact Any application using that loads untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc).</p> <p>### Patches https://github.com/phpseclib/phpseclib/commit/e32531001b4d62c66c3d824ccef54ffad835eb59</p> <p>### Workarounds No.</p> <p>### Resources https://github.com/phpseclib/phpseclib/commit/e32531001b4d62c66c3d824ccef54ffad835eb59 https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-599-shi-bing.pdf</p> <p><strong>Affected:</strong> Packagist: phpseclib/phpseclib</p> <p>### Impact Any application using that loads untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc).</p> <p>### Patches https://github.com/phpseclib/phpseclib/commit/e32531001b4d62c66c3d824ccef54ffad835eb59</p> <p>### Workarounds No.</p> <p>### Resources https://github.com/phpseclib/phpseclib/commit/e32531001b4d62c66c3d824ccef54ffad835eb59 https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-599-shi-bing.pdf</p> https://cve.radiocsirt.org/vuln/ghsa-f2qx-66wf-wvvx https://cve.radiocsirt.org/vuln/gsd-2024-27355 gsd-2024-27355 https://cve.radiocsirt.org/vuln/gsd-2024-27355 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-27355 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:Pro:22.04:LTS: phpseclib</p> <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:Pro:22.04:LTS: phpseclib</p> <p>An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-27355