Denial of Service Vulnerability in phpseclib Affects Fedora Users

Linuxsecurity

Denial of Service Vulnerability in phpseclib Affects Fedora Users

First seen 18 Aug 2026, 10:06 UTC • •57.9

Article Content

1 / 5

Browse articles

ThreatCluster •August 19, 2026 at 09:39 UTC

•CVE-2026-44167 allows denial of service via untrusted ASN.1 file loading.
•Affected Fedora versions include 43 and 44, with a patch available in version 2.0.55.
•Users are urged to update their systems using the 'dnf' update program.

A denial of service vulnerability (CVE-2026-44167) has been identified in the phpseclib library used in Fedora systems. The flaw allows attackers to exploit untrusted ASN.1 file loading, potentially leading to service disruption. Fedora versions 43 and 44 are affected, prompting an urgent update to version 2.0.55, released on August 9, 2026. The vulnerability was published on May 12, 2026, and has been linked to bug report #2476731. Users are advised to upgrade their systems using the 'dnf' update program to mitigate the risk. The issue highlights the importance of auditing Linux privileges to prevent escalation and system-wide damage. No active exploitation has been reported as of the latest updates.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 54d ago How this analysis works

Timeline

2026-05-12

CVE-2026-44167 published

The denial of service vulnerability in phpseclib was officially disclosed, affecting Fedora systems.

2026-08-09

Update to phpseclib version 2.0.55 released

Fedora released an update to address CVE-2026-44167, urging users to upgrade to mitigate the vulnerability.

2026-08-18

Current status reported

No active exploitation of the vulnerability has been reported as of today, but users are advised to update.

More articles in this cluster (4)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

DDoS

Organization (1)

Fedora

Vulnerability (1)

CVE-2026-44167

Affected Platform (1)

Linux

Relationships

CVE-2026-44167 targets Linux
DDoS targets Linux
CVE-2026-44167 related to Fedora

Following this threat?

Track Fedora and CVE-2026-44167 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical phpseclib Vulnerabilities Expose Sensitive Data and Cause DoS Multiple vulnerabilities were discovered in phpseclib, a library for arbitrary-precision integer arithmetic. Notably, CVE-2026-32935 involves a lack of constant-time padding validation in AES CBC mode, potentially allowing remote attackers to obtain sensitive information. CVE-2026-40194 highlights a similar issue with…

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…