Skip to content
OpenAdvisories

Package · Debian

libcrypt-dsa-perl

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-14570

    Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery

    Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer…

    TIMLEGGE Crypt::DSA libcrypt-dsa-perl libcrypt-dsa-perl Debian Ubuntu
  • High 7.3
    CVE-2026-8700

    Crypt::DSA versions before 1.20 for Perl generate seeds using rand

    Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

    TIMLEGGE Crypt::DSA libcrypt-dsa-perl libcrypt-dsa-perl Debian Ubuntu