| Package | Affected versions | Patched versions |
|---|---|---|
| crypt-dsa | = 0.01= 0.02= 0.03= 0.10= 0.11= 0.12= 0.13= 0.14= 0.15_01= 1.16≤ 1.17 |
The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free