CVE-2025-40913
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
Reserved 2025-04-16 | Published 2025-07-16 | Updated 2025-07-16 | Assigner CPANSecCWE-1395 Dependency on Vulnerable Third-Party Component
www.cve.org/CVERecord?id=CVE-2023-36328
github.com/libtom/libtommath/pull/546
github.com/advisories/GHSA-j3xv-6967-cv88
metacpan.org/...0.16/source/dropbear/libtommath/bn_mp_grow.c
Support options
