Package · Azure Linux

perl-Authen-SASL

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2025-40918

Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely

Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numb…

EHUELS Authen::SASL::Perl::DIGEST_MD5 libauthen-sasl-perl libauthen-sasl-perl Debian Ubuntu Azure Linux Alpine

Jul 16, 2025