5.8

CVE-2011-3599

The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.

Data is provided by the National Vulnerability Database (NVD)
Adam Kennedy ≫ Crypt-dsa Version <= 1.17
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.01
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.02
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.03
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.10
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.11
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.12
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.13
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.14
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version0.15_01
   Perl ≫ Perl
Adam Kennedy ≫ Crypt-dsa Version1.16
   Perl ≫ Perl
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.36% 0.573
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N