CVE catalog

CVE-2006-0898

libcrypt-cbc-perl: CVE-2006-0898

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.43% · Oct 27, 2026

Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibcrypt-cbc-perlsid3.07-1fixed
Debianlibcrypt-cbc-perlforky3.07-1fixed
Debianlibcrypt-cbc-perltrixie3.04-3fixed
Debianlibcrypt-cbc-perlbookworm3.04-3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibcrypt-cbc-perlsourcesid2.17-1not yet assignedNot reportedNot reported
Debianlibcrypt-cbc-perlsourceforky2.17-1not yet assignedNot reportedNot reported
Debianlibcrypt-cbc-perlsourcetrixie2.17-1not yet assignedNot reportedNot reported
Debianlibcrypt-cbc-perlsourcebookworm2.17-1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libcrypt-cbc-perl]Fixed
    Details (2)

    • 3.04-3 · all · bookworm

      Fixed · Fixed: 2.17-1

      dsa · libcrypt-cbc-perl · debian · bookworm; dsa · libcrypt-cbc-perl · debian · 12

    • 3.04-3 · all · bookworm

      Fixed · Fixed: 2.17-1

      dsa · libcrypt-cbc-perl · debian · bookworm; dsa · libcrypt-cbc-perl · debian · 12

[Debian 13 (Trixie)]

  • [libcrypt-cbc-perl]Fixed
    Details (2)

    • 3.04-3 · all · trixie

      Fixed · Fixed: 2.17-1

      dsa · libcrypt-cbc-perl · debian · 13

    • 3.04-3 · all · trixie

      Fixed · Fixed: 2.17-1

      dsa · libcrypt-cbc-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]