Skip to content
OpenAdvisories

Vendor

perl

3 known vulnerabilities.

Products

perl 2 Crypt::Random 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2024-56406

    Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2025-1828

    Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functions

    Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions. If the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon (egd) service is not available Crypt::Ra…

    perl Crypt::Random