CVE Vulnerabilities

CVE-2023-49316

Excessive Iteration

Published: Nov 27, 2023 | Modified: Dec 01, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

Weakness

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Affected Software

Name Vendor Start Version End Version
Phpseclib Phpseclib 3.0.0 (including) 3.0.34 (excluding)
Php-phpseclib3 Ubuntu bionic *
Php-phpseclib3 Ubuntu lunar *
Php-phpseclib3 Ubuntu mantic *
Php-phpseclib3 Ubuntu trusty *
Php-phpseclib3 Ubuntu upstream *
Php-phpseclib3 Ubuntu xenial *

References