Advisories · Technology
MIK CryptX.
Every CVE that names MIK CryptX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path
- MIK CryptX
- CWE-208
- CVSS 7.5 High
CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers
- MIK CryptX
- Memory corruption
- CVSS 7.5 High
CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking
- MIK CryptX
- Weak cryptography or TLS
- CWE-335
- CVSS 9.8 CriticalCritical · CVSS 9+
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode
- MIK CryptX
- CWE-1395
- CVSS 9.8 CriticalCritical · CVSS 9+
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow
- MIK CryptX
- CWE-1395