2 matches found
CVE-2026-14570: Use of Insufficiently Random Values
Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce a...
7.5CVSS5.7AI score0.00508EPSS
SaveExploits0References2
PuTTY 安全漏洞
PuTTY is a suite of free Telnet, Rlogin, and SSH client software from the individual developer Simon Tatham. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY versions 0.68 through 0.80, which stems from the presence of biased rand...
5.9CVSS7.6AI score0.05773EPSS
SaveExploits0References17
20