The vulnerability of the Perl-Crypt-DSA digital signature package, related to insufficient entropy, allows a attacker to trigger a denial-of-service attack.

The vulnerability of the Perl-Crypt-DSA digital signature package is related to insufficient entropy. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Perl-Crypt-DSA digital signature package, related to the use of insufficiently random values, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Perl-Crypt-DSA digital signature package is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the number of surfaces that are subject to attacks, with their quantitative measure exceeding the desired maximum. This allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the use of files and directories accessible to external parties, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260908-73-0023

The vulnerability in perl-Crypt-DSA is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260908-73-0039

The vulnerability in perl-Crypt-DSA is related to an attack surface whose quantitative magnitude exceeds the desired maximum. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

ROS-20260907-73-0508

The vulnerability in perl-Crypt-DSA is related to insufficient entropy. Exploitation of this vulnerability can be carried out remotely...

ROS-20260907-73-0511

The vulnerability in perl-Crypt-DSA is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Fedora 43 : perl-Crypt-DSA (2026-b77b9c5f04)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b77b9c5f04 advisory. This update, to the current upstream release, addresses a cryptographic flaw modulo bias in key generation that could lead to private key compromise...

Linux Distros Unpatched Vulnerability : CVE-2026-14570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery...

CVE-2026-14570

A flaw was found in Crypt::DSA. Versions before 1.22 for Perl use a biased random number generator when creating the Digital Signature Algorithm DSA signing nonce and private key. This bias allows a remote attacker to recover the private key through a lattice attack if they collect a sufficient...

CVE-2026-14570

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce a...

UBUNTU-CVE-2026-14570

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce a...

CVE-2026-14570

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce a...

CVE-2026-14570 Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce a...

CVE-2026-14570

The Crypt::DSA Perl module (versions before 1.22 ) is vulnerable to private-key recovery due to a cryptographic flaw in the Crypt::DSA::Util::makerandom function. The function forces the high bit of every returned value to be set to ensure an exactly N-bit integer for prime search. This causes th...

CVE-2026-14570: Use of Insufficiently Random Values

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce a...

Fedora 43 : perl-Crypt-DSA (2026-5cf57e43e3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5cf57e43e3 advisory. This update, to the current upstream release, prevents key material reuse for multiple signing events CVE-2026-12205, CWE-323. Tenable has extracted the...

Fedora 44 : perl-Crypt-DSA (2026-f4a6b0c635)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f4a6b0c635 advisory. This update, to the current upstream release, prevents key material reuse for multiple signing events CVE-2026-12205, CWE-323. Tenable has extracted the...

CVE-2026-12205

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign on a Key object picks a nonce, and every later sign on that same object...