{
  "id": "CVE-2024-27355",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-03-01T23:15:08.553",
  "lastModified": "2024-03-21T02:52:19.970",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID)."
    },
    {
      "lang": "es",
      "value": "Se descubri\u00f3 un problema en phpseclib 1.x anterior a 1.0.23, 2.x anterior a 2.0.47 y 3.x anterior a 3.0.36. Al procesar el identificador de objeto ASN.1 de un certificado, se puede proporcionar un subidentificador que conduzca a una denegaci\u00f3n de servicio (consumo de CPU para decodeOID)."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://gist.github.com/katzj/ee72f3c2a00590812b2ea3c0c8890e0b",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/phpseclib/phpseclib/blob/978d081fe50ff92879c50ff143c62a143edb0117/phpseclib/File/ASN1.php#L1129",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00002.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00003.html",
      "source": "cve@mitre.org"
    }
  ]
}