CVE-2026-14570 Weak cryptography in Crypt::DSA
Attackers can recover private keys from biased random generation in Crypt::DSA, compromising signed data and requiring key rotation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-14570?
CVE-2026-14570 is a high-severity vulnerability in TIMLEGGE Crypt::DSA, published on 5 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.
"Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values."
An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.
Keys used to sign with an affected version should be considered compromised and new keys should be generated.
Weakness: CWE-330
Which versions are affected by CVE-2026-14570?
How do I fix CVE-2026-14570?
No fix has been published for CVE-2026-14570 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-14570 being exploited?
There is no known exploitation of CVE-2026-14570 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-14570, GHSA-v6rc-95xw-8xp5, UBUNTU-CVE-2026-14570.