Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-57854

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator

Description

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand() function, which is not suitable for cryptographic functions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

DOUGDUDE Net::NSCA::Client

Default version status: unaffected

  • 0 to ≤ 0.009002affected

References