PT-2026-33994

Name of the Vulnerable Software and Affected Versions Net::Dropbear versions prior to 0.14 Description Net::Dropbear for Perl contains a vulnerable version of libtomcrypt, specifically including versions of Dropbear 2019.78 or earlier. Recommendations Update Net::Dropbear to version 0.14 or later...

Net::Dropbear 安全漏洞

Net::Dropbear is an SSH client interface module developed by ATRODO’s individual developers, based on Dropbear. Versions of Net::Dropbear prior to 0.14 contained security vulnerabilities, which stemmed from the inclusion of the vulnerable libtomcrypt library. These vulnerabilities may be affected...

CVE-2025-15638: Dependency on Vulnerable Third-Party Component

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

Advisory ROSA-SA-2026-3193

Software: libtomcrypt 1.18.2 OS: ROSA Virtualization 2.1 unaffected versions = libtomcrypt-1.18.2-5.0.1.rv3 affected versions libtomcrypt-1.18.2-5.0.1.1.rv3 CVE-ID: CVE-2019-17362 BDU-ID: 2025-16070 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the derdecodeutf8string function of the...

Advisory ROSA-SA-2026-3173

Software: libtomcrypt 1.18.2 OS: ROSA Virtualization 3.0 unaffected versions = libtomcrypt-1.18.2-5.0.1.rv30 affected versions libtomcrypt-1.18.2-5.0.1.rv30 CVE-ID: CVE-2019-17362 BDU-ID: 2025-16070 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the derdecodeutf8string function of the...

Advisory ROSA-SA-2026-3153

Software: libtomcrypt 1.18.2 OS: ROSA Virtualization 3.1 unaffected versions = libtomcrypt-1.18.2-5.0.1.rv31 affected versions libtomcrypt-1.18.2-5.0.1.1.rv31 CVE-ID: CVE-2019-17362 BDU-ID: 2025-16070 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the derdecodeutf8string function of the...

TencentOS Server 4: libtomcrypt (TSSA-2025:0362)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0362 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2016-7063

Malware in sbrugna...

EUVD-2005-1603

Malware in sbrugna...

EUVD-2016-1519

Malware in sbrugna...

EUVD-2018-4408

Malware in sbrugna...

EUVD-2017-1551

Malware in sbrugna...

[SECURITY] Fedora 41 Update: perl-CryptX-0.087-2.fc41

This Perl library provides a cryptography based on LibTomCrypt library...

[SECURITY] Fedora 42 Update: perl-CryptX-0.087-2.fc42

This Perl library provides a cryptography based on LibTomCrypt library...

Denial Of Service (DoS)

libtomcrypt.so, is vulnerable to integer overflow. The vulnerability is due to an integer overflow flaw in the embedded libtommath library used by Perl CryptX, which allows an attacker to trigger a crash or cause unexpected behavior, potentially leading to Denial of Service DoS...

TencentOS Server 4: libtomcrypt (TSSA-2024:0369)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0369 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2017-1000412

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key...

CBL Mariner 2.0 Security Update: libtomcrypt (CVE-2019-17362)

The version of libtomcrypt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-17362 advisory. - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not...

OPENSUSE-SU-2024:11003-1 libtomcrypt-devel-1.18.2-2.10 on GA media

These are all security issues fixed in the libtomcrypt-devel-1.18.2-2.10 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:0112-1 Security update for perl-CryptX

This update for perl-CryptX fixes the following issues: Updated to version 0.080: 0.080 2023-10-04 - fix 95 AES-NI troubles on MS Windows gcc compiler - fix 96 Tests failure with Math::BigInt = 1.999840 - Enabled AES-NI for platforms with gcc/clang/llvm 0.079 2023-10-01 - fix 92 update libtomcryp...