CVE-2018-25107

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2018-25107

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2018-25107

Downstream

Published

2024-12-29T07:15:05.287Z

Modified

2025-11-14T08:38:57.312406Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits.

References

Affected packages

Type: GIT
Repo: https://github.com/karenetheridge/crypt-random-source
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

ebe7b83dda3479157c100f2340780ea6a8b92b10

Crypt-Random-Source-0.01

Crypt-Random-Source-0.01_01

Crypt-Random-Source-0.02

Crypt-Random-Source-0.03

Crypt-Random-Source-0.04

Crypt-Random-Source-0.05

v0.06

v0.07

v0.08

v0.09

v0.10

v0.11

v0.12

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-25107.json"