phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
Weakness
Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Phpseclib | Phpseclib | * | 1.0.27 (excluding) |
| Phpseclib | Phpseclib | 2.0.0 (including) | 2.0.52 (excluding) |
| Phpseclib | Phpseclib | 3.0.0 (including) | 3.0.50 (excluding) |
| Php-phpseclib | Ubuntu | esm-apps/xenial | * |
| Php-phpseclib | Ubuntu | questing | * |
| Php-phpseclib3 | Ubuntu | questing | * |
| Phpseclib | Ubuntu | esm-apps/xenial | * |
| Phpseclib | Ubuntu | questing | * |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/462.html
- https://cwe.mitre.org/data/definitions/541.html
- https://cwe.mitre.org/data/definitions/580.html