CVE-2026-12205

CRITICAL EPSS 20.6%
Published Jun 15, 20262w ago · Modified Jun 17, 20262w ago
9.1 CVSS 3.1
Critical
Find Similar
Published Jun 15, 2026 2w ago
Last Modified Jun 17, 2026 2w ago

Description

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.

CVSS Details

Base Score
9.1
Exploitability
3.9
Impact
5.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability None

Threat Intelligence

EPSS Exploit Probability
20.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-323

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2026/06/15/4
  • metacpan.org https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.20/source/lib/Crypt/DSA.pm#L47
  • metacpan.org https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.21/changes

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.