phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

概要

参考情報

• phpseclib/phpseclib security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-44167 · ADVISORY
• phpseclib/phpseclib commit d53d202 · WEB
• phpseclib/phpseclib · PACKAGE

phpseclib/phpseclib のその他の脆弱性

• CVE-2026-84308中 6.3phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeFi…
• CVE-2026-55599中 5.8phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an application validates an untrusted X.…
• CVE-2026-40194低 3.7phpseclib is a PHP secure communications library. Starting in 0.1.1 and prior to 3.0.51, 2.0.53, and 1.0.28, phpseclib\Net\SSH2::get_binary_…
• CVE-2026-32935中 5.9phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.…
• CVE-2023-52892高 7.5In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates…