EUVD-2026-30666
GHSA-r2q3-hjc8-7x6q
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Lifecycle Timeline
4DescriptionNVD
Crypt::DSA versions before 1.20 for Perl generate seeds using rand.
Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
AnalysisAI
Cryptographic weakness in Crypt::DSA for Perl versions before 1.20 allows remote attackers to predict DSA key material because seeds are generated with Perl's built-in rand() function instead of a cryptographically secure random source. Any DSA keys, signatures, or nonces produced by affected versions may be recoverable through brute-force or statistical analysis of the predictable PRNG state. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all systems running Crypt::DSA versions prior to 1.20 and document which applications depend on DSA key generation. Within 7 days: Upgrade all affected instances to Crypt::DSA 1.20 or later and initiate forensic analysis of DSA keys and signatures generated during the vulnerable period. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today