CVE-2023-52892

2024-06-2700:00:00

ubuntu.com

phpseclib

tls certificates

x.509 certificate host verification

6.8 Medium

AI Score

Confidence

Low

JSON

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some
characters in Subject Alternative Name fields in TLS certificates are
incorrectly allowed to have a special meaning in regular expressions (such
as a + wildcard), leading to name confusion in X.509 certificate host
verification.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchphp-phpseclib< anyUNKNOWN
ubuntu20.04noarchphp-phpseclib< anyUNKNOWN
ubuntu22.04noarchphp-phpseclib< anyUNKNOWN
ubuntu23.10noarchphp-phpseclib< anyUNKNOWN
ubuntu16.04noarchphp-phpseclib< anyUNKNOWN
ubuntu22.04noarchphp-phpseclib3< anyUNKNOWN
ubuntu23.10noarchphp-phpseclib3< anyUNKNOWN
ubuntu18.04noarchphpseclib< anyUNKNOWN
ubuntu20.04noarchphpseclib< anyUNKNOWN
ubuntu22.04noarchphpseclib< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	20.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	22.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	23.10	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	16.04	noarch	php-phpseclib	< any	UNKNOWN
ubuntu	22.04	noarch	php-phpseclib3	< any	UNKNOWN
ubuntu	23.10	noarch	php-phpseclib3	< any	UNKNOWN
ubuntu	18.04	noarch	phpseclib	< any	UNKNOWN
ubuntu	20.04	noarch	phpseclib	< any	UNKNOWN
ubuntu	22.04	noarch	phpseclib	< any	UNKNOWN