CVE-2026-14570

{
  "id": "CVE-2026-14570",
  "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
  "published": "2026-07-05T02:17:40.190",
  "lastModified": "2026-10-25T15:10:00.147",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.\n\n\"Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.\"\n\nAn attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.\n\nKeys used to sign with an affected version should be considered compromised and new keys should be generated."
    },
    {
      "lang": "es",
      "value": "Las versiones de Crypt::DSA anteriores a la 1.22 para Perl obtienen el nonce de firma DSA y la clave privada de un generador de números aleatorios sesgado, lo que lleva a la recuperación de la clave privada.\n\n’Crypt::DSA::Util::makerandom fuerza el bit más significativo de cada valor que devuelve para obtener un entero de exactamente N bits para la búsqueda de primos. El nonce de firma y la clave privada se obtienen de makerandom. Debido a que el bit más significativo siempre está establecido, el resultado no es uniforme: su bit superior está fijo, produciendo valores inseguros.’\n\nUn atacante que recopila un número modesto de firmas bajo una clave afectada, junto con la clave pública, puede recuperar la clave privada con un ataque de celosía.\n\nLas claves utilizadas para firmar con una versión afectada deben considerarse comprometidas y se deben generar nuevas claves."
    }
  ],
  "affected": [
    {
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "affectedData": [
        {
          "vendor": "TIMLEGGE",
          "product": "Crypt::DSA",
          "defaultStatus": "unaffected",
          "collectionURL": "https://cpan.org/modules",
          "packageName": "Crypt-DSA",
          "programFiles": [
            "lib/Crypt/DSA/Util.pm",
            "lib/Crypt/DSA.pm",
            "lib/Crypt/DSA/KeyChain.pm"
          ],
          "programRoutines": [
            {
              "name": "Crypt::DSA::Util::makerandom"
            },
            {
              "name": "Crypt::DSA::sign"
            },
            {
              "name": "Crypt::DSA::KeyChain::generate_keys"
            }
          ],
          "repo": "https://github.com/perl-Crypt-OpenPGP/Crypt-DSA",
          "versions": [
            {
              "version": "0",
              "lessThan": "1.22",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-06T13:41:52.097549Z",
          "id": "CVE-2026-14570",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-330"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.21/source/lib/Crypt/DSA/Util.pm#L56",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.22/changes",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.22/diff/TIMLEGGE/Crypt-DSA-1.21#lib/Crypt/DSA/Util.pm",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/07/05/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}