CVE-2026-12205

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-12205", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-06-14T12:07:30.610Z", "datePublished": "2026-06-15T21:57:18.317Z", "dateUpdated": "2026-06-16T16:13:32.533Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Crypt-DSA", "product": "Crypt::DSA", "programFiles": ["lib/Crypt/DSA.pm"], "programRoutines": [{"name": "Crypt::DSA::sign"}], "repo": "https://github.com/perl-Crypt-OpenPGP/Crypt-DSA", "vendor": "TIMLEGGE", "versions": [{"lessThan": "1.21", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Richard Kettlewell"}], "descriptions": [{"lang": "en", "value": "Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.\n\nCrypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.\n\nThe first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical \"r\".\n\nKeys used to sign more than once with an affected version should be considered compromised."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-323", "description": "CWE-323 Reusing a Nonce, Key Pair in Encryption", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-06-15T21:57:18.317Z"}, "references": [{"url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.20/source/lib/Crypt/DSA.pm#L47"}, {"tags": ["release-notes"], "url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.21/changes"}], "solutions": [{"lang": "en", "value": "Upgrade to version 1.21\n\nRevoke any keys that may have been compromised.\n\nCrypt::DSA was deprecated in version 1.20. You should migrate to another solution."}], "source": {"discovery": "UNKNOWN"}, "timeline": [{"lang": "en", "time": "2026-05-16T00:00:00.000Z", "value": "Maintainer contacted"}, {"lang": "en", "time": "2026-06-13T00:00:00.000Z", "value": "Maintainer and CPANSec contacted"}, {"lang": "en", "time": "2026-06-14T00:00:00.000Z", "value": "Fixed version released"}], "title": "Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/06/15/4"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-06-15T22:44:28.639Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-06-16T16:13:28.769417Z", "id": "CVE-2026-12205", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-16T16:13:32.533Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/06/15/4"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-06-15T22:44:28.639Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-12205", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-16T16:13:28.769417Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-16T16:13:23.959Z"}}], "cna": {"title": "Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Richard Kettlewell"}], "affected": [{"repo": "https://github.com/perl-Crypt-OpenPGP/Crypt-DSA", "vendor": "TIMLEGGE", "product": "Crypt::DSA", "versions": [{"status": "affected", "version": "0", "lessThan": "1.21", "versionType": "custom"}], "packageName": "Crypt-DSA", "programFiles": ["lib/Crypt/DSA.pm"], "collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "programRoutines": [{"name": "Crypt::DSA::sign"}]}], "timeline": [{"lang": "en", "time": "2026-05-16T00:00:00.000Z", "value": "Maintainer contacted"}, {"lang": "en", "time": "2026-06-13T00:00:00.000Z", "value": "Maintainer and CPANSec contacted"}, {"lang": "en", "time": "2026-06-14T00:00:00.000Z", "value": "Fixed version released"}], "solutions": [{"lang": "en", "value": "Upgrade to version 1.21\n\nRevoke any keys that may have been compromised.\n\nCrypt::DSA was deprecated in version 1.20. You should migrate to another solution."}], "references": [{"url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.20/source/lib/Crypt/DSA.pm#L47"}, {"url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.21/changes", "tags": ["release-notes"]}], "x_generator": {"engine": "cpansec-cna-tool 0.1"}, "descriptions": [{"lang": "en", "value": "Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.\n\nCrypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.\n\nThe first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical \"r\".\n\nKeys used to sign more than once with an affected version should be considered compromised."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-323", "description": "CWE-323 Reusing a Nonce, Key Pair in Encryption"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-06-15T21:57:18.317Z"}}}, "cveMetadata": {"cveId": "CVE-2026-12205", "state": "PUBLISHED", "dateUpdated": "2026-06-16T16:13:32.533Z", "dateReserved": "2026-06-14T12:07:30.610Z", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "datePublished": "2026-06-15T21:57:18.317Z", "assignerShortName": "CPANSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Crypt-DSA", "product": "Crypt::DSA", "programFiles": ["lib/Crypt/DSA.pm"], "programRoutines": [{"name": "Crypt::DSA::sign"}], "repo": "https://github.com/perl-Crypt-OpenPGP/Crypt-DSA", "vendor": "TIMLEGGE", "versions": [{"lessThan": "1.21", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.\n\nCrypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.\n\nThe first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical \"r\".\n\nKeys used to sign more than once with an affected version should be considered compromised."}, {"lang": "es", "value": "Las versiones de Crypt::DSA anteriores a la 1.21 para Perl reutilizaban el nonce entre firmas, lo que llevaba a la recuperaci\u00f3n de la clave privada.\n\nCrypt::DSA::sign cachea el material nonce por firma en el objeto Key sin borrarlo nunca.\n\nEl primer sign() en un objeto Key elige un nonce, y cada sign() posterior en ese mismo objeto lo reutiliza, produciendo una \u2019r\u2019 id\u00e9ntica.\n\nLas claves utilizadas para firmar m\u00e1s de una vez con una versi\u00f3n afectada deben considerarse comprometidas."}], "id": "CVE-2026-12205", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-12205", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-16T16:13:28.769417Z", "version": "2.0.3"}}]}, "published": "2026-06-15T23:16:43.150", "references": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.20/source/lib/Crypt/DSA.pm#L47"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.21/changes"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/06/15/4"}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-323"}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "type": "Secondary"}]}

{"bugzilla": {"description": "Crypt::DSA: Crypt::DSA: Private-key recovery via nonce reuse across signatures", "id": "2489070", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489070"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-323", "details": ["Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.\nCrypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.\nThe first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical \"r\".\nKeys used to sign more than once with an affected version should be considered compromised.", "A flaw was found in Crypt::DSA, a Perl module for Digital Signature Algorithm (DSA) cryptography. This vulnerability occurs because the software reuses a unique random number, known as a nonce, for multiple digital signatures generated with the same cryptographic key. An attacker could exploit this flaw to recover the private key, which would compromise the security of any data signed with that key."], "mitigation": {"lang": "en:us", "value": "To mitigate this issue, ensure that a new Crypt::DSA Key object is instantiated for each digital signature operation. Reusing the same Key object for multiple signatures will lead to nonce reuse and potential private key recovery. If a service or application uses Crypt::DSA for signing, it should be restarted after implementing this change to ensure new key objects are used."}, "name": "CVE-2026-12205", "public_date": "2026-06-15T21:57:18Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-12205\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-12205\nhttps://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.20/source/lib/Crypt/DSA.pm#L47\nhttps://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.21/changes"], "statement": "This is an Important flaw in the `perl-Crypt-DSA` module, allowing private key recovery due to nonce reuse across multiple digital signatures generated with the same key. An attacker could exploit this to compromise data signed with the affected key. This risk is present when applications repeatedly use the same `Crypt::DSA` key object for signing without proper nonce regeneration.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.21)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Crypt::DSA", "source": "cna", "vendor": "TIMLEGGE"}, "product": "crypt::dsa", "vendor": "timlegge"}], "created": "2026-06-16T02:15:03.729513+00:00", "updated": "2026-06-17T22:00:04.870085+00:00", "vendors": ["timlegge", "timlegge$PRODUCT$crypt::dsa"]}