Denial of Service Vulnerability in phpseclib Affects Fedora Users

Denial of Service Vulnerability in phpseclib Affects Fedora Users

First seen 18 Aug 2026, 10:06 UTC •Linuxsecurity •93% similarity •57.9

Article Content

Browse articles
ThreatCluster

A denial of service vulnerability (CVE-2026-44167) has been identified in the phpseclib library used in Fedora systems. The flaw allows attackers to exploit untrusted ASN.1 file loading, potentially leading to service disruption. Fedora versions 43 and 44 are affected, prompting an urgent update to version 2.0.55, released on August 9, 2026. The vulnerability was published on May 12, 2026, and has been linked to bug report #2476731. Users are advised to upgrade their systems using the 'dnf' update program to mitigate the risk. The issue highlights the importance of auditing Linux privileges to prevent escalation and system-wide damage. No active exploitation has been reported as of the latest updates.

Key Points: • CVE-2026-44167 allows denial of service via untrusted ASN.1 file loading. • Affected Fedora versions include 43 and 44, with a patch available in version 2.0.55. • Users are urged to update their systems using the 'dnf' update program.

ThreatCluster AI How this analysis works

Timeline

2026-05-12
CVE-2026-44167 published
The denial of service vulnerability in phpseclib was officially disclosed, affecting Fedora systems.
Article 1
2026-08-09
Update to phpseclib version 2.0.55 released
Fedora released an update to address CVE-2026-44167, urging users to upgrade to mitigate the vulnerability.
Article 1
2026-08-18
Current status reported
No active exploitation of the vulnerability has been reported as of today, but users are advised to update.
Article 1

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Fedora Linux