CVE-2024-27354
An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a de...
Affects 2 products across 2 vendors.
Software does not properly limit resource usage, allowing an attacker to exhaust CPU, memory, disk, or bandwidth.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A vulnerability in phpseclib versions 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36 allows an attacker to cause a denial of service by constructing a malformed certificate with an extremely large prime, leading to excessive CPU consumption during the isPrime primality check.
BSID: BS-2024-GLOBAL-051609-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2024-27354?
What is the CVSS score for CVE-2024-27354?
Is CVE-2024-27354 actively exploited?
How do I remediate CVE-2024-27354?
What systems are affected by CVE-2024-27354?
| CVE ID | CVE-2024-27354 |
|---|---|
| BSID | BS-2024-GLOBAL-051609-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Published | 2024-03-01 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.
Source: NIST NVD / MITRE CVE Database
The attack vector involves an attacker crafting a specially designed certificate with an unusually large prime number. When this certificate is processed by the vulnerable versions of phpseclib, the isPrime function enters an infinite loop or consumes excessive CPU resources, resulting in a denial of service condition.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Debian | Debian Linux | 10.0 |
| Phpseclib | Phpseclib | ≥ 1.0.0, < 1.0.23 ≥ 2.0.0, < 2.0.47 ≥ 3.0.0, < 3.0.36 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 58d0a450eceaf0f2d1df9cda40a860b99604eb1f1a7213385eecf909b89eb0bd3aa64ce57e261a4dcb0e81f4ca988313b1b3d45e1a7b48062828320908889256 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →