Every CVE Search/ Get API key

CVE-2026-44167

phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

7.5 HighFix available

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.20%Up 0.2 points since May 13, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

Record
CVE-2026-44167
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2026-29724 7.5

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

Record
EUVD-2026-29724
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3qpq-r242-jqj7 7.5

phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

Impact

Anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc)

Patches

https://github.com/phpseclib/phpseclib/commit/d53d2021bcb9f6a04d5d44ec99e6bbef219a71bc

Workarounds

No.

References

https://github.com/phpseclib/phpseclib/commit/d53d2021bcb9f6a04d5d44ec99e6bbef219a71bc

Record
GHSA-3qpq-r242-jqj7
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
NVD 7.5

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

Record
CVE-2026-44167
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSV 7.5

phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

Record
CVE-2026-44167
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVDEBIAN-CVE-2026-44167 7.5

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

Record
DEBIAN-CVE-2026-44167
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVGHSA-3qpq-r242-jqj7 7.5

phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()

Impact

Anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc)

Patches

https://github.com/phpseclib/phpseclib/commit/d53d2021bcb9f6a04d5d44ec99e6bbef219a71bc

Workarounds

No.

References

https://github.com/phpseclib/phpseclib/commit/d53d2021bcb9f6a04d5d44ec99e6bbef219a71bc

Record
GHSA-3qpq-r242-jqj7
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVUBUNTU-CVE-2026-44167 7.5

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

Record
UBUNTU-CVE-2026-44167
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1779065206 No score

TuxCare security update for phpseclib/phpseclib (4 CVEs)

TuxCare rebuilt phpseclib/phpseclib to address 4 CVEs. Fixed in 0.3.10-p1+tuxcare.

Record
CLSA-2026-1779065206
Updated
2026-11-02
OSVUSN-8830-1 No score

php-phpseclib vulnerabilities

It was discovered that phpseclib did not perform constant-time padding validation when using AES in CBC mode. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-32935)

It was discovered that phpseclib did not use a constant-time comparison when validating SSH packet authentication codes. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40194)

It was discovered that phpseclib did not properly limit object identifier lengths when parsing ASN.1 data. An attacker could possibly use this issue to cause phpseclib to use excessive resources, leading to a denial of service. (CVE-2026-44167)

Record
USN-8830-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
phpseclib/phpseclib
Packagist
 2.0.0 to 2.0.53
2.0.54
phpseclib/phpseclib
Packagist
 3.0.0 to 3.0.51
3.0.52
phpseclib/phpseclib
Packagist
 0.1.1 to 1.0.28
1.0.29
phpseclib/phpseclib
TuxCare:Packagist
From an advisory covering 4 CVEs
 0.3.10 up to 0.3.10-p1+tuxcare
0.3.10-p1+tuxcare
php-phpseclib
Debian:12
 before 2.0.42-1+deb12u5, plus listed versions
2.0.42-12.0.42-1+deb12u12.0.42-1+deb12u22.0.42-1+deb12u3
2.0.42-1+deb12u5
php-phpseclib
Debian:13
 before 2.0.48-3+deb13u3, plus listed versions
2.0.48-32.0.48-3+deb13u1
2.0.48-3+deb13u3
php-phpseclib
Debian:14
 before 2.0.54-1, plus listed versions
2.0.48-32.0.49-12.0.50-12.0.51-12.0.52-12.0.53-1
2.0.54-1
php-phpseclib3
Debian:12
 before 3.0.19-1+deb12u6, plus listed versions
3.0.19-13.0.19-1+deb12u13.0.19-1+deb12u23.0.19-1+deb12u33.0.19-1+deb12u4
3.0.19-1+deb12u6
php-phpseclib3
Debian:13
 before 3.0.43-2+deb13u3, plus listed versions
3.0.43-23.0.43-2+deb13u1
3.0.43-2+deb13u3
php-phpseclib3
Debian:14
 before 3.0.52-1, plus listed versions
3.0.43-23.0.44-13.0.44-23.0.45-13.0.46-1
Show 6 moreShow less
3.0.46-23.0.47-13.0.48-13.0.49-13.0.50-13.0.51-1
3.0.52-1
Show 31 moreShow less
Affected packages
PackageAffectedFixed
phpseclib
Debian:12
 before 1.0.20-1+deb12u5, plus listed versions
1.0.20-11.0.20-1+deb12u11.0.20-1+deb12u21.0.20-1+deb12u3
1.0.20-1+deb12u5
phpseclib
Debian:13
 before 1.0.23-6+deb13u3, plus listed versions
1.0.23-61.0.23-6+deb13u1
1.0.23-6+deb13u3
phpseclib/phpseclib
Packagist
 0.1.1 up to 1.0.29, plus listed versions
0.3.00.3.10.3.100.3.50.3.6
Show 32 moreShow less
0.3.70.3.80.3.91.0.01.0.11.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.21.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.31.0.41.0.51.0.61.0.71.0.81.0.9
1.0.29
phpseclib/phpseclib
Packagist
 2.0.0 up to 2.0.54, plus listed versions
2.0.12.0.102.0.112.0.122.0.13
Show 45 moreShow less
2.0.142.0.152.0.162.0.172.0.182.0.192.0.22.0.202.0.212.0.222.0.232.0.242.0.252.0.262.0.272.0.282.0.292.0.32.0.302.0.312.0.322.0.332.0.342.0.352.0.362.0.372.0.382.0.392.0.42.0.402.0.412.0.422.0.432.0.442.0.452.0.462.0.472.0.482.0.492.0.52.0.502.0.512.0.522.0.532.0.6
2.0.54
phpseclib/phpseclib
Packagist
 3.0.0 up to 3.0.52, plus listed versions
3.0.13.0.103.0.113.0.123.0.13
Show 37 moreShow less
3.0.143.0.153.0.163.0.173.0.183.0.193.0.23.0.203.0.213.0.223.0.233.0.33.0.333.0.343.0.353.0.363.0.373.0.383.0.393.0.43.0.403.0.413.0.423.0.433.0.443.0.453.0.463.0.473.0.483.0.493.0.53.0.503.0.513.0.63.0.73.0.83.0.9
3.0.52
php-phpseclib
Ubuntu:Pro:16.04:LTS
 before 2.0.1-1ubuntu0.1~esm1, plus listed versions
2.0.1-12.0.1-1build1
2.0.1-1ubuntu0.1~esm1
phpseclib
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.3.10-31.0.0-21.0.0-31.0.1-11.0.1-31.0.1-3ubuntu0.11.0.1-3ubuntu0.1+esm1
 None known
php-phpseclib
Ubuntu:Pro:18.04:LTS
 before 2.0.9-1ubuntu0.1~esm3, plus listed versions
2.0.6-12.0.7-12.0.9-12.0.9-1ubuntu0.1~esm2
2.0.9-1ubuntu0.1~esm3
phpseclib
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.0.7-11.0.8-11.0.9-11.0.9-1ubuntu0.1~esm11.0.9-1ubuntu0.1~esm2
 None known
php-phpseclib
Ubuntu:Pro:20.04:LTS
 before 2.0.23-2ubuntu0.1~esm3, plus listed versions
2.0.21-22.0.23-22.0.23-2ubuntu0.1~esm2
2.0.23-2ubuntu0.1~esm3
phpseclib
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.0.16-21.0.18-21.0.18-2ubuntu0.1~esm11.0.18-2ubuntu0.1~esm2
 None known
php-phpseclib
Ubuntu:Pro:22.04:LTS
 before 2.0.36-1ubuntu0.1~esm3, plus listed versions
2.0.30-2ubuntu12.0.34-12.0.35-12.0.36-12.0.36-1ubuntu0.1~esm2
2.0.36-1ubuntu0.1~esm3
php-phpseclib3
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.0.9-13.0.10-13.0.12-23.0.13-13.0.13-1ubuntu0.1~esm1
 None known
phpseclib
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.0.19-3ubuntu21.0.19-3ubuntu31.0.20-11.0.20-1ubuntu0.1~esm11.0.20-1+deb12u3build0.22.04.1
 None known
php-phpseclib3
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.0.21-23.0.33-13.0.34-13.0.35-13.0.37-1
 None known
php-phpseclib
Ubuntu:Pro:24.04:LTS
 before 2.0.47-1ubuntu0.1~esm1, plus listed versions
2.0.44-12.0.45-12.0.46-12.0.47-1
2.0.47-1ubuntu0.1~esm1
phpseclib
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
1.0.21-21.0.22-11.0.23-11.0.23-1ubuntu0.1~esm1
 None known
php-phpseclib
Ubuntu:25.10
 All versions, plus listed versions
2.0.48-3
 None known
php-phpseclib3
Ubuntu:25.10
 All versions, plus listed versions
3.0.43-2
 None known
phpseclib
Ubuntu:25.10
 All versions, plus listed versions
1.0.23-6
 None known
php-phpseclib3
Ubuntu:26.10
 All versions, plus listed versions
3.0.49-1ubuntu13.0.57-1
 None known
phpseclib
Ubuntu:26.10
 All versions, plus listed versions
1.0.24-11.0.29-11.0.30-1
 None known
php-phpseclib3
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.0.43-23.0.44-13.0.47-13.0.49-13.0.49-1ubuntu1
 None known
php-phpseclib
Ubuntu:Pro:26.04:LTS
 before 2.0.51-1ubuntu0.1~esm1, plus listed versions
2.0.48-32.0.49-12.0.51-1
2.0.51-1ubuntu0.1~esm1
phpseclib
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
1.0.23-61.0.24-11.0.24-1ubuntu0.1~esm1
 None known
php-phpseclib
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 2.0.1-1ubuntu0.1~esm1, plus listed versions
2.0.1-12.0.1-1build1
2.0.1-1ubuntu0.1~esm1
php-phpseclib
Ubuntu:Pro:18.04:LTS
From an advisory covering 3 CVEs
 before 2.0.9-1ubuntu0.1~esm3, plus listed versions
2.0.6-12.0.7-12.0.9-12.0.9-1ubuntu0.1~esm2
2.0.9-1ubuntu0.1~esm3
php-phpseclib
Ubuntu:Pro:20.04:LTS
From an advisory covering 3 CVEs
 before 2.0.23-2ubuntu0.1~esm3, plus listed versions
2.0.21-22.0.23-22.0.23-2ubuntu0.1~esm2
2.0.23-2ubuntu0.1~esm3
php-phpseclib
Ubuntu:Pro:22.04:LTS
From an advisory covering 3 CVEs
 before 2.0.36-1ubuntu0.1~esm3, plus listed versions
2.0.30-2ubuntu12.0.34-12.0.35-12.0.36-12.0.36-1ubuntu0.1~esm2
2.0.36-1ubuntu0.1~esm3
php-phpseclib
Ubuntu:Pro:24.04:LTS
From an advisory covering 3 CVEs
 before 2.0.47-1ubuntu0.1~esm1, plus listed versions
2.0.44-12.0.45-12.0.46-12.0.47-1
2.0.47-1ubuntu0.1~esm1
php-phpseclib
Ubuntu:Pro:26.04:LTS
From an advisory covering 3 CVEs
 before 2.0.51-1ubuntu0.1~esm1, plus listed versions
2.0.48-32.0.49-12.0.51-1
2.0.51-1ubuntu0.1~esm1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-44167 is a high vulnerability (CVSS 7.5) in Phpseclib, published May 5, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in phpseclib/phpseclib 2.0.54.

References

Show 6 moreShow less
This page doesn't list everything

Left out here: 3 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open