CVE-2024-27355

HIGH

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that...

Affects 2 products across 2 vendors.

CVSS 3.17.5
EPSS0.6%
Percentile46th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no integrity impact, full availability impact.
CWE Weakness Definitions
CWE-400: Uncontrolled Resource Consumption (DoS)

Software does not properly limit resource usage, allowing an attacker to exhaust CPU, memory, disk, or bandwidth.

Related Attack Patterns (CAPEC)
CAPEC-147 XML Ping of the Death
via CWE-400
CAPEC-492 Regular Expression Exponential Blowup
via CWE-400
CAPEC-227 Sustained Client Engagement
via CWE-400

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A vulnerability in phpseclib versions 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36 can lead to a denial of service due to excessive CPU consumption when processing ASN.1 object identifiers in certificates.

BSID: BS-2024-GLOBAL-051610-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-27355?
A vulnerability in phpseclib versions 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36 can lead to a denial of service due to excessive CPU consumption when processing ASN.1 object identifiers in certificates.
What is the CVSS score for CVE-2024-27355?
CVE-2024-27355 has CVSS 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS: 0.6%.
Is CVE-2024-27355 actively exploited?
No confirmed active exploitation of CVE-2024-27355 as of 2026-05-30.
How do I remediate CVE-2024-27355?
Priority: HIGH.
What systems are affected by CVE-2024-27355?
CVE-2024-27355 affects Debian Debian Linux; Phpseclib Phpseclib.
Vulnerability Details
CVE IDCVE-2024-27355
BSIDBS-2024-GLOBAL-051610-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published2024-03-01
Last Modified2025-09-15
ICS Relevance15%
Weakness (CWE)
Uncontrolled Resource Consumption (DoS)
SourceNVD
Official Description

An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by providing a specially crafted ASN.1 object identifier in a certificate, causing the decodeOID function to consume excessive CPU resources, leading to a denial of service.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Debian Debian Linux 10.0
Phpseclib Phpseclib ≥ 1.0.0, < 1.0.23 ≥ 2.0.0, < 2.0.47 ≥ 3.0.0, < 3.0.36
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 958 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash42ab82bc9640a65cb7fa80636401302a0f4bd1d9a2fe041e6028dd2478b28e7f27134ce71a06197184ad28eb6c0b054112b5f42ae5357ff7d6524290e343596a
Related CVEs affecting Debian
CVE-2012-0444 10.0 Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 ... CVE-2013-2863 10.0 Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, whic... CVE-2015-2724 10.0 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox... CVE-2017-16845 10.0 hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during gue... CVE-1999-0698 10.0 Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux.
View all Debian CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →