From d084c75b5009257cc457415a67884952fcb26405 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 13 Aug 2024 18:21:26 +0000 Subject: [PATCH] Publish GHSA-jr22-8qgm-4q87 --- .../2024/03/GHSA-jr22-8qgm-4q87/GHSA-jr22-8qgm-4q87.json | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2024/03/GHSA-jr22-8qgm-4q87/GHSA-jr22-8qgm-4q87.json b/advisories/github-reviewed/2024/03/GHSA-jr22-8qgm-4q87/GHSA-jr22-8qgm-4q87.json index a2ed785b6bc..c5bc3bbc09b 100644 --- a/advisories/github-reviewed/2024/03/GHSA-jr22-8qgm-4q87/GHSA-jr22-8qgm-4q87.json +++ b/advisories/github-reviewed/2024/03/GHSA-jr22-8qgm-4q87/GHSA-jr22-8qgm-4q87.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jr22-8qgm-4q87", - "modified": "2024-05-10T14:29:18Z", + "modified": "2024-08-13T18:19:49Z", "published": "2024-03-02T00:31:33Z", "aliases": [ "CVE-2024-27355" @@ -9,7 +9,10 @@ "summary": "phpseclib does not properly limit the ASN1 OID length", "details": "An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ { @@ -110,7 +113,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-400" ], "severity": "HIGH", "github_reviewed": true,