Detections
Analytics
CVE-2018-25099
critical
Description
In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag.
References
https://metacpan.org/dist/CryptX/changes
https://github.com/libtom/libtomcrypt/pull/451