libcrypt-dsa-perl vulnerabilities (Debian)
5 vulnerabilities.
-
libcrypt-dsa-perlDebian Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery 7.5 High -
libcrypt-dsa-perlDebian Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery 9.1 Critical -
libcrypt-dsa-perlDebian Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified 6.5 Medium -
libcrypt-dsa-perlDebian Crypt::DSA versions before 1.20 for Perl generate seeds using rand 7.3 High -
libcrypt-dsa-perlDebian The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses... 5.8 Medium