Vendors / P5-crypt-perl Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now P5-crypt-perl Project records in CISA KEV No P5-crypt-perl Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00709 · Published 2020-06-07 · No fix listed CWE-347
Priority LOW 35
ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01135 · Published 2020-08-10 · No fix listed CWE-203
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0