2 matches found
[SECURITY] Fedora 44 Update: perl-Crypt-ScryptKDF-0.011-1.fc44
Scrypt is a password-based key derivation function like for example PBKDF2. Scrypt was designed to be "memory-hard" algorithm in order to make it expensive to perform large scale custom hardware attacks...
4.8CVSS5.9AI score0.00222EPSS
SaveExploits0
CVE-2026-8647
A flaw was found in perl-Crypt-ScryptKDF. The randombytes function in versions through 0.010 uses an insecure random number source when no cryptographically secure pseudorandom number generator CSPRNG module is available. This occurs because the function falls back to using the built-in rand...
4.8CVSS5.6AI score0.00222EPSS
SaveExploits0References2
20