CVE Vulnerabilities

CVE-2023-49316

Excessive Iteration

Published: Nov 27, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

Weakness

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Affected Software

NameVendorStart VersionEnd Version
PhpseclibPhpseclib3.0.0 (including)3.0.34 (excluding)
Php-phpseclib3Ubuntubionic*
Php-phpseclib3Ubuntulunar*
Php-phpseclib3Ubuntumantic*
Php-phpseclib3Ubuntutrusty*
Php-phpseclib3Ubuntuupstream*
Php-phpseclib3Ubuntuxenial*

References