high7.5
CVE-2018-6519
The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-…
Impact
The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplesamlphp | Saml2 | from 1.0.0 before 1.10.4 from 2.0.0 before 2.3.5 from 3.0.0 before 3.1.1 |
| Debian | Debian Linux | Versions 8.0, 9.0 |