CVE-2026-41564 Details
Description
CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A Crypt::PK::* object created before `fork()` shares byte-identical PRNG state with every child process, and any randomized operation they perform can produce identical output, including key generation. Two ECDSA or DSA signatures from different processes are enough to recover the signing private key through nonce-reuse key recovery. This affects preforking services such as the Starman web server, where a Crypt::PK::* object loaded at startup is inherited by every worker process.
A vulnerability exists in CryptX versions prior to 0.088 for Perl, where the pseudorandom number generator (PRNG) state in Crypt::PK modules is not properly reseeded after a process forks. This issue affects Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519, and Crypt::PK::X25519. The vulnerability arises because these modules initialize a per-object PRNG state in their constructors and reuse it without detecting forks. As a result, a Crypt::PK object created before a fork shares an identical PRNG state with all child processes. This can lead to identical outputs in randomized operations, including key generation. In the case of ECDSA or DSA, this nonce-reuse can be exploited to recover the signing private key, as demonstrated in a published advisory.
Users can upgrade to CryptX version 0.088 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6 | CISA-ADP | Vendor Advisory |
| https://github.com/DCIT/perl-CryptX/commit/9a1dd3e0c27d68e32450be5538b864c2b115ee15.patch | CPANSec | Patch |
| https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6 | CPANSec | Vendor Advisory |
| https://metacpan.org/release/MIK/CryptX-0.088 | CPANSec | Product |
| http://www.openwall.com/lists/oss-security/2026/04/23/2 | CVE | Mailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-335 | Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) | CPANSec |
| CWE-338 | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | CPANSec |
Affected Products
| Product | Versions |
|---|---|
| dcit cryptx | < 0.088 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CPANSec |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 12, 2026 | Initial Analysis | [email protected] |
| Apr 23, 2026 | CVE Modified | CISA-ADP |
| Apr 23, 2026 | CVE Modified | CVE |
| Apr 23, 2026 | New CVE Received | CPANSec |