CVE-2006-0898: Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher…

Description

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.4% · higher than 73% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

CC

Crypt Cbc · Lincoln D. Stein

through 2.16; 1.00; 1.10; 1.20; 1.21; 1.22; +17 more · source: NVD