CVE-2024-57854
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
05/03/2026
Last modified:
05/03/2026
Description
Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator.<br />
<br />
Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors.<br />
<br />
Data::Rand::Obscure uses Perl&#39;s built-in rand() function, which is not suitable for cryptographic functions.