CVE-2011-3599: Adam Kennedy Crypt-Dsa

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.

Affected products

• Adam Kennedy Crypt-Dsa: up to and including 1.17; version 0.01 only; version 0.02 only; version 0.03 only; version 0.10 only; version 0.11 only; …

Published 2011-10-10. Last modified 2026-06-16.