| Package | Affected versions | Patched versions |
|---|---|---|
| crypt cbc | = 1.00= 1.10= 1.20= 1.21= 1.22= 1.24= 1.25= 2.00= 2.01= 2.02= 2.03= 2.04= 2.05= 2.07= 2.08= 2.09= 2.10= 2.11= 2.12= 2.13= 2.14= 2.15≤ 2.16 |
Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free