{
  "cveId": "CVE-2025-2814",
  "url": "https://patchblox.com/security/cve/CVE-2025-2814",
  "summary": "CVE-2025-2814 is fixed in libcrypt-cbc-perl on 1 platform by DEBIAN-CVE-2025-2814 (version 3.07-1), released April 13, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libcrypt-cbc-perl: Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() function as the default source of entropy, whic...",
  "description": "Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.  This issue affects operating systems where \u0022/dev/urandom\u0027\u0022 is unavailable.\u00A0 In that case, Crypt::CBC will fallback to use the insecure rand() function.",
  "published": "2025-04-13T00:15:14Z",
  "severity": "medium",
  "cvss": 4,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
  "epss": 0.00201,
  "epssPercentile": 0.1009,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libcrypt-cbc-perl",
      "release": "Debian 14",
      "fixedVersion": "3.07-1",
      "fix": "DEBIAN-CVE-2025-2814",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-2814",
      "released": "2025-04-13T00:15:14Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}