CVE-2018-6519
NONE EPSS 74.7%
Published Feb 2, 20188y ago · Modified Jun 17, 20262w ago
Published Feb 2, 2018 8y ago
Last Modified Jun 17, 2026 2w ago
Description
The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.
Threat Intelligence
EPSS Exploit Probability
74.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-74
Affected Products 5
| Vendor | Product | Version | Range |
|---|---|---|---|
| simplesamlphp | saml2 | * | ≥1.0.0 – <1.10.4 |
| simplesamlphp | saml2 | * | ≥2.0.0 – <2.3.5 |
| simplesamlphp | saml2 | * | ≥3.0.0 – <3.1.1 |
| debian | debian_linux | 8.0 | any |
| debian | debian_linux | 9.0 | any |
References 2
- simplesamlphp.org https://simplesamlphp.org/security/201801-01
- debian.org https://www.debian.org/security/2018/dsa-4127
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.