Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perl Crypt::DSA 模块加密问题漏洞
Vulnerability Description
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。 Perl的Crypt::DSA (aka Crypt-DSA)模块1.17版本存在加密问题漏洞。由于没有/dev/random时使用Data::Random模块，远程攻击者可借助强力攻击伪造签名或者决定签名消息的签名密钥。
CVSS Information
N/A
Vulnerability Type
N/A