Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.
CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perl-CryptX-debuginfoUpgrade perl-CryptX-testsUpgrade perl-CryptXUpgrade perl-CryptX-debugsource | Jun 24, 2025 | Jun 11, 2025 |
| Debian | — | No solution exists | Jun 13, 2025 | Jun 11, 2025 |
| Suse | — | Upgrade os-autoinstUpgrade openQA-bootstrapUpgrade openQA-single-instanceUpgrade os-autoinst-s390-depsUpgrade openQA-auto-updateUpgrade os-autoinst-ipmi-depsUpgrade openQAUpgrade openQA-python-scriptsUpgrade openQA-clientUpgrade perl-CryptXUpgrade openQA-docUpgrade perl-MojoliciousUpgrade os-autoinst-qemu-kvmUpgrade openQA-muninUpgrade perl-JSON-ValidatorUpgrade os-autoinst-develUpgrade openQA-commonUpgrade openQA-mcpUpgrade openQA-local-dbUpgrade perl-MCPUpgrade os-autoinst-qemu-x86Upgrade openQA-single-instance-nginxUpgrade openQA-develUpgrade os-autoinst-openvswitchUpgrade perl-IPC-RunUpgrade openQA-workerUpgrade openQA-continuous-updateUpgrade os-autoinst-swtpm | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade libcryptx-perl (Ubuntu Pro) | Mar 27, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub