CVE-2018-6519

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp SAML2 library versions prior to 1.10.4 SimpleSAMLphp SAML2 library versions 2.x prior to 2.3.5 SimpleSAMLphp SAML2 library versions 3.x prior to 3.1.1

Description The issue is related to a Regular Expression Denial of Service vulnerability. This vulnerability affects the processing of fraction-of-seconds data in a timestamp.

Recommendations For versions prior to 1.10.4, update to version 1.10.4 or later. For versions 2.x prior to 2.3.5, update to version 2.3.5 or later. For versions 3.x prior to 3.1.1, update to version 3.1.1 or later.