PT-2023-31165 · Phpseclib · Phpseclib

Terrafrost · Publicado 2023-11-27 · Atualizado 2026-05-09 · CVE-2023-49316

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions phpseclib versions 3.0.0 through 3.0.33

Description The issue arises from excessively large degrees in binary fields, which can lead to a denial of service. This occurs in the Math/BinaryField.php file of the phpseclib library.

Recommendations For phpseclib versions 3.0.0 through 3.0.33, update to version 3.0.34 or later to resolve the issue.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-834

CWE-400

Identificadores relacionados

CVE-2023-49316

GHSA-2F25-PFQ3-C7H8

GHSA-JPR7-Q523-HX25

Produtos afetados

Phpseclib

Referências · 17

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/phpseclib/phpseclib/CVE-2023-49316.yaml · Exploit
• https://github.com/phpseclib/phpseclib · Nota
• https://github.com/phpseclib/phpseclib/releases/tag/3.0.34 · Nota
• https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f · Correção
• https://github.com/phpseclib/phpseclib/security/advisories/GHSA-2f25-pfq3-c7h8 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-49316 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-49316 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-49316 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-49316 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-2f25-pfq3-c7h8 · Aviso do Fabricante
• https://t.me/cvenotify/61560 · Publicação no Telegram
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-49316 · Aviso do Fabricante
• https://twitter.com/dailycve/status/2052926349669552313 · Publicação no Twitter
• https://cve.org/CVERecord?id=CVE-2023-49316 · Nota de Segurança
• https://github.com/advisories/GHSA-jpr7-q523-hx25 · Nota