Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.
CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perl-CryptXUpgrade perl-CryptX-debugsourceUpgrade perl-CryptX-testsUpgrade perl-CryptX-debuginfo | Jun 24, 2025 | Jun 11, 2025 |
| Debian | — | No solution exists | Jun 13, 2025 | Jun 11, 2025 |
| Suse | — | Upgrade os-autoinst-s390-depsUpgrade openQA-single-instanceUpgrade os-autoinstUpgrade perl-MojoliciousUpgrade openQA-bootstrapUpgrade os-autoinst-ipmi-depsUpgrade openQA-auto-updateUpgrade perl-CryptXUpgrade openQAUpgrade openQA-docUpgrade openQA-clientUpgrade openQA-python-scriptsUpgrade openQA-develUpgrade perl-JSON-ValidatorUpgrade openQA-mcpUpgrade os-autoinst-qemu-x86Upgrade perl-MCPUpgrade os-autoinst-develUpgrade openQA-local-dbUpgrade openQA-single-instance-nginxUpgrade os-autoinst-qemu-kvmUpgrade openQA-commonUpgrade openQA-muninUpgrade os-autoinst-swtpmUpgrade openQA-workerUpgrade openQA-continuous-updateUpgrade perl-IPC-RunUpgrade os-autoinst-openvswitch | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade libcryptx-perl (Ubuntu Pro) | Mar 27, 2026 | Jun 11, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub