CVE-2026-18536

Data::Entropy for Perl (Data::Entropy, prior to version 0.010) reads remote entropy sources over plain HTTP via Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo. The integrity check for RandomOrg trivially matches any non-empty string, enabling on-path attackers...

kernel: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

A flaw was found in the Netfilter and IPV6 functionality in the Linux kernel leading to a leak of 4 random bits. This issue may allow a remote user to preform an unauthorized read of random bits from the server...

CVE-2018-25107

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand function, which is not a secure source of random bits...

UBUNTU-CVE-2018-25107

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand function, which is not a secure source of random bits...

CVE-2018-25107

The CVE-2018-25107 affects the Crypt::Random::Source Perl module prior to version 0.13. The underlying issue is a fallback to the built-in rand() for randomness, which is not a secure source of random bits. The vulnerability exposes systems relying on this module to weak entropy at random generat...

CVE-2018-25107

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand function, which is not a secure source of random bits...