CVE-2023-49316

HIGH

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

Affects 1 product across 1 vendor.

CVSS 3.17.5
EPSS0.8%
Percentile55th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-834: CWE-834
◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in phpseclib 3 before 3.0.34 allows for a denial of service due to excessively large degrees in Math/BinaryField.php.

BSID: BS-2023-GLOBAL-023907-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2023-49316?
A vulnerability in phpseclib 3 before 3.0.34 allows for a denial of service due to excessively large degrees in Math/BinaryField.php.
What is the CVSS score for CVE-2023-49316?
CVE-2023-49316 has CVSS 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.8%.
Is CVE-2023-49316 actively exploited?
No confirmed active exploitation of CVE-2023-49316 as of 2026-09-25.
How do I remediate CVE-2023-49316?
Priority: HIGH.
What systems are affected by CVE-2023-49316?
CVE-2023-49316 affects Phpseclib Phpseclib.
Vulnerability Details
CVE IDCVE-2023-49316
BSIDBS-2023-GLOBAL-023907-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published2023-11-27
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
CWE-834
SourceNVD
Official Description

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by providing excessively large degree values to the affected function, leading to excessive resource consumption and potential denial of service.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Phpseclib Phpseclib ≥ 3.0.0, < 3.0.34
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1053 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash18422c2a178755b8dafe69addd578c5f6d829a6d4661c6cdbd10d10be7ac836996bcdfe6a22a2e5f789cfdd0bcf6628d702ec1386666ce1770ee5982f13cf322
Related CVEs affecting Phpseclib
CVE-2026-1357 9.8 The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPr... CVE-2023-27560 7.5 Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with ... CVE-2024-27354 7.5 An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, an... CVE-2024-27355 7.5 An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, an... CVE-2023-52892 7.5 In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some ch...
View all Phpseclib CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →