Open Source Security mailing list@oss_security
Disclosure
Perl CPAN Crypt::PBKDF2 before 0.261630 CVE-2017-20240: Timing attacks https://www.openwall.com/lists/oss-security/2026/06/12/3 CVE-2026-9638: Insecure random values for salts https://www.openwall.com/lists/oss-security/2026/06/12/4 CVE-2026-9641: Weak default algorithm and number of iterations https://www.openwall.com/lists/oss-security/2026/06/12/5
Post summary
A disclosure of three new CVE vulnerabilities affecting Perl CPAN Crypt::PBKDF2, detailing timing attacks, insecure random salts, and weak default algorithm usage.
1000081
4.6K followersView on X