vulnerability

SUSE: CVE-2018-25099: SUSE Linux Security Advisory

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Mar 18, 2024

Added

Aug 9, 2024

Modified

Feb 18, 2025

Description

In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag.

suse-upgrade-perl-cryptx

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.