DRSTEVE vulnerabilities
We track 2 vulnerabilities in DRSTEVE products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest DRSTEVE vulnerabilities
- 7.5 High severity
Crypt::Password: Observable Timing Discrepancy
Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash.
- 9.8 Critical severity
Crypt::Password: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.