CVE-2024-56830

Summary

The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand() if no strong randomization module is present.

Affected Software

Weaknesses

• CWE-338: CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://lists.debian.org/debian-lts-announce/2025/04/msg00015.html

References

• https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes
• https://github.com/briandfoy/cpan-security-advisory/issues/184

• ←Previous
• Next→