CVE-2024-27354

—

CVSS 3.1

7.5 high

EPSS

<1%p47

Published

Mar 1, 2024 (Mar 1, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.

Vendors: phpseclib debian
Products: phpseclib, debian linux
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.