Critical severity9.1NVD Advisory· Published Mar 5, 2026· Updated Jun 17, 2026
CVE-2024-57854
CVE-2024-57854
Description
Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator.
Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors.
Data::Rand::Obscure uses Perl's built-in rand() function, which is not suitable for cryptographic functions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <=0.009002
- DOUGDUDE/Net::NSCA::Clientv5Range: 0
Patches
Vulnerability mechanics
References
3- patch-diff.githubusercontent.com/raw/dougwilson/perl5-net-nsca-client/pull/2.patchnvdPatch
- www.openwall.com/lists/oss-security/2026/03/05/1nvdMailing ListThird Party Advisory
- metacpan.org/release/DOUGDUDE/Net-NSCA-Client-0.009002/source/lib/Net/NSCA/Client/InitialPacket.pmnvdIssue TrackingProduct
News mentions
0No linked articles in our index yet.