CVE-2023-27560

phpseclib Infinite Loop vulnerability in packagist/phpseclib/phpseclib

Identifiers

CVE-2023-27560, GHSA-hm7p-r324-hhf3

Package Slug

packagist/phpseclib/phpseclib

Vulnerability

phpseclib Infinite Loop vulnerability

Description

Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.

Affected Versions

All versions starting from 3.0.0 before 3.0.19

Solution

Upgrade to version 3.0.19 or above.

Last Modified

2023-03-06

source