Summary
It was discovered that phpseclib did not perform constant-time padding
validation when using AES in CBC mode. A remote attacker could possibly
use this issue to obtain sensitive information. (CVE-2026-32935)
It was discovered that phpseclib did not use a constant-time comparison
when validating SSH packet authentication codes. A remote attacker could
possibly use this issue to obtain sensitive information. (CVE-2026-40194)
It was discovered that phpseclib did not properly limit object identifier
lengths when parsing ASN.1 data. An attacker could possibly use this issue
to cause phpseclib to use excessive resources, leading to a denial of
service. (CVE-2026-44167)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | php-phpseclib | 2.0.1-1ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | php-phpseclib | 2.0.9-1ubuntu0.1~esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | php-phpseclib | 2.0.23-2ubuntu0.1~esm3 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | php-phpseclib | 2.0.36-1ubuntu0.1~esm3 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | php-phpseclib | 2.0.47-1ubuntu0.1~esm1 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | php-phpseclib | 2.0.51-1ubuntu0.1~esm1 |
Vulnerabilities 3
-
High 8.2
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in version…
-
High 7.5
phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()
phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.2…
-
Low 3.7
phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()
phpseclib is a PHP secure communications library. Starting in 0.1.1 and prior to 3.0.51, 2.0.53, and 1.0.28, phpseclib\Net\SSH2::get_binary_packet() uses PHP's != operator to compare a received SSH packet HMAC against the locally computed HMAC. != on equal-le…