CVE-2023-49316: phpseclib vulnerable to denial of service

November 27, 2023 (updated December 1, 2023)

In Math/BinaryField.php in phpseclib before 3.0.34, excessively large degrees can lead to a denial of service.

References

github.com/advisories/GHSA-jpr7-q523-hx25
github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f
github.com/phpseclib/phpseclib/releases/tag/3.0.34
nvd.nist.gov/vuln/detail/CVE-2023-49316

Code Behaviors & Features

Detect and mitigate CVE-2023-49316 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →