Поиск уязвимостей
Количество 51
Количество 51
ROS-20260908-80-0024
Уязвимость perl-Crypt-OpenSSL-AES
ROS-20260908-80-0023
Уязвимость perl-Crypt-DSA
ROS-20260908-73-0025
Уязвимость perl-Convert-ASN1
ROS-20260908-73-0024
Уязвимость perl-Convert-PEM
ROS-20260908-73-0023
Уязвимость perl-Crypt-DSA
GHSA-v6rc-95xw-8xp5
Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values." An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack. Keys used to sign with an affected version should be considered compromised and new keys should be generated.
BDU:2026-15259
Уязвимость пакета цифровой подписи DSA языка Perl perl-Crypt-DSA, связанная с использованием недостаточно случайных значений, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
CVE-2026-8704
Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.
CVE-2026-8704
Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.
CVE-2026-8704
Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing ex ...
CVE-2026-8700
Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
CVE-2026-8700
Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
CVE-2026-8700
Crypt::DSA versions before 1.20 for Perl generate seeds using rand. S ...
ROS-20260907-80-0514
Уязвимость perl-Convert-ASN1
ROS-20260907-80-0513
Уязвимость perl-Convert-PEM
ROS-20260907-80-0512
Уязвимость perl-Crypt-OpenSSL-AES
ROS-20260907-80-0511
Уязвимость perl-Crypt-DSA
ROS-20260907-80-0510
Уязвимость perl-Convert-ASN1
ROS-20260907-80-0509
Уязвимость perl-Crypt-OpenSSL-AES
ROS-20260907-80-0508
Уязвимость perl-Convert-PEM
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20260908-80-0024 Уязвимость perl-Crypt-OpenSSL-AES | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
| ROS-20260908-80-0023 Уязвимость perl-Crypt-DSA | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
| ROS-20260908-73-0025 Уязвимость perl-Convert-ASN1 | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
| ROS-20260908-73-0024 Уязвимость perl-Convert-PEM | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
| ROS-20260908-73-0023 Уязвимость perl-Crypt-DSA | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
| GHSA-v6rc-95xw-8xp5 Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values." An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack. Keys used to sign with an affected version should be considered compromised and new keys should be generated. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | BDU:2026-15259 Уязвимость пакета цифровой подписи DSA языка Perl perl-Crypt-DSA, связанная с использованием недостаточно случайных значений, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-8704 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-8704 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| CVE-2026-8704 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing ex ... | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| CVE-2026-8700 Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
| CVE-2026-8700 Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
| CVE-2026-8700 Crypt::DSA versions before 1.20 for Perl generate seeds using rand. S ... | CVSS3: 7.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260907-80-0514 Уязвимость perl-Convert-ASN1 | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| ROS-20260907-80-0513 Уязвимость perl-Convert-PEM | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| ROS-20260907-80-0512 Уязвимость perl-Crypt-OpenSSL-AES | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| ROS-20260907-80-0511 Уязвимость perl-Crypt-DSA | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| ROS-20260907-80-0510 Уязвимость perl-Convert-ASN1 | CVSS3: 7.3 | 0% Низкий | 2 месяца назад |
| ROS-20260907-80-0509 Уязвимость perl-Crypt-OpenSSL-AES | CVSS3: 7.3 | 0% Низкий | 2 месяца назад |
| ROS-20260907-80-0508 Уязвимость perl-Convert-PEM | CVSS3: 7.3 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу