PT-2025-16174 · Unknown +2 · Crypt::Cbc +2

Name of the Vulnerable Software and Affected Versions: Crypt::CBC versions 1.21 through 3.04 Description: The issue affects Crypt::CBC for Perl, where versions between 1.21 and 3.04 may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographi...

p5-Crypt-CBC -- Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Lib-Crypt-CBC project reports: Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case...

[SECURITY] Fedora 42 Update: perl-Data-Entropy-0.008-1.fc42

This module maintains a concept of a current selection of entropy source. Algorithms that require entropy, such as those in Data::Entropy::Algorithms, can use the source nominated by this module, avoiding the need for entropy source objects to be explicitly passed around. This is convenient becau...

UBUNTU-CVE-2025-29918

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to an infinite loop when negated PCRE is used. Packet processing thread becomes stuck in infinite loop limiting visibility and availability i...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata that stems from a PCRE rule issue that could lead to an infinite loop...

Debian: Security Advisory (DLA-4122-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4122-1] libbssolv-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4122-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura April 09, 2025 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-4120-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4122 : libbssolv-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4122 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4122-1 [email protected] https://www.debian.org/lts/security/...

DLA-4122-1 libbssolv-perl - security update

Bulletin has no description...

The vulnerability of the rand() function in the Crypt-Random random number generation module for Perl allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rand function in the Crypt-Random random number generation module for Perl is related to errors in the code of the pseudo-random number generator. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

[SECURITY] [DLA 4120-1] libnet-easytcp-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4120-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura April 08, 2025 https://wiki.debian.org/LTS -...

SUSE CVE-2024-58036

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

[SECURITY] Fedora 40 Update: perl-Data-Entropy-0.008-1.fc40

This module maintains a concept of a current selection of entropy source. Algorithms that require entropy, such as those in Data::Entropy::Algorithms, can use the source nominated by this module, avoiding the need for entropy source objects to be explicitly passed around. This is convenient becau...

[SECURITY] Fedora 41 Update: perl-Data-Entropy-0.008-1.fc41

This module maintains a concept of a current selection of entropy source. Algorithms that require entropy, such as those in Data::Entropy::Algorithms, can use the source nominated by this module, avoiding the need for entropy source objects to be explicitly passed around. This is convenient becau...

Fedora: Security Advisory (FEDORA-2025-52d7857536)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : perl-Data-Entropy (2025-8a7bd987fe)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8a7bd987fe advisory. Prior to version 0.008, the Perl module Data::Entropy relied on Perl's builtin rand function to choose an entropy source. Version 0.008 does away wi...

Fedora 40 : perl-Data-Entropy (2025-52d7857536)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-52d7857536 advisory. Prior to version 0.008, the Perl module Data::Entropy relied on Perl's builtin rand function to choose an entropy source. Version 0.008 does away wi...

DLA-4120-1 libnet-easytcp-perl - security update

Bulletin has no description...

Debian dla-4120 : libnet-easytcp-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4120 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4120-1 [email protected] https://www.debian.org/lts/security/...