VULNERABILITY INTELLIGENCE

CVE-2011-3599

CVSS score5.8 MEDIUM
EPSS probability1.96%
CISA KEVNot currently listed
Published2011-10-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.

Primary references