Skip to content
OpenAdvisories

Package · Debian

libcrypt-pbkdf2-perl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-9641

    Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations

    Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy systems. These versions default to using 1000 iterations. Depending on the chosen …

    ARODLAND Crypt::PBKDF2 libcrypt-pbkdf2-perl libcrypt-pbkdf2-perl Debian Ubuntu
  • Medium 5.9
    CVE-2017-20240

    Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks

    Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying derived-key.

    ARODLAND Crypt::PBKDF2 libcrypt-pbkdf2-perl libcrypt-pbkdf2-perl Debian Ubuntu