Approved changes feed: RSS · Atom

cpe:2.3:a:lds:crypt::cbc:*:*:*:*:*:*:*:*

part: a version: * update: cbc

VendorLds (5fe9cfc8-986c-5191-ac64-a016da0a18f4)
ProductCrypt (0c049500-490c-522d-ba1a-734d7abe2447)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2814 vulnerable 2026-06-08 07:16:58.411844 Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions
Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable.  In that case, Crypt::CBC will fallback to use the insecure rand() function.
Published: 2025-04-12T23:41:48.511Z
Updated: 2025-09-05T13:21:32.700Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.