CVE-2024-27355

—

CVSS 3.1

7.5 high

EPSS

<1%p45

Published

Mar 1, 2024 (Mar 1, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).

Vendors: phpseclib debian
Products: phpseclib, debian linux
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.