phpseclib: guardrails needed on isPrime and randomPrime
### Impact Anyone trying to generate a prime and testing the primality of a number. ### Patches https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575 ### Workarounds Using the GMP extension would probably help, assuming that one has its own guardrails. ### Resources https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575 https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-599-shi-bing.pdf
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-27354US | — | — | ||
An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large pr… | ||||
references
External citations — patches, advisories, analysis.
- https://gist.github.com/katzj/ee72f3c2a00590812b2ea3c0c8890e0bWEB
- https://github.com/FriendsOfPHP/security-advisories/blob/master/phpseclib/phpseclib/CVE-2024-27354.yamlWEB
- https://github.com/phpseclib/phpseclibPACKAGE
- https://github.com/phpseclib/phpseclib/blob/master/phpseclib/Math/PrimeField.php#L49WEB
- https://github.com/phpseclib/phpseclib/commit/2870c8fab3f132d2ed40a66c97a36fe5ab625698WEB
- https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575WEB
- https://github.com/phpseclib/phpseclib/commit/c55b75199ec8d12cec6eadf6da99da4a3712fe56WEB
- https://github.com/phpseclib/phpseclib/security/advisories/GHSA-2528-jw5q-ww88WEB
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan