CVE-2018-6519

The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-02-02

Last modified

2024-08-05

Weaknesses

CWE-74

Affected products

• Debian Linux (Debian)
• Saml2 (Simplesamlphp)

References

• https://simplesamlphp.org/security/201801-01
• https://www.debian.org/security/2018/dsa-4127