Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f4a6b0c635 advisory.

    This update, to the current upstream release, prevents key material reuse for multiple signing events     (CVE-2026-12205, CWE-323).


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5cf57e43e3 advisory.

    This update, to the current upstream release, prevents key material reuse for multiple signing events     (CVE-2026-12205, CWE-323).


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key     recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing     it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it,     producing an identical r. Keys used to sign more than once with an affected version should be considered     compromised. (CVE-2026-12205)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cf622b92d7 advisory.

    Automatic update for perl-Crypt-DSA-1.21-1.fc45.

    ##### **Changelog**

    ```
    * Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.21-1
    - Update to 1.21
      - Fixed key material reuse for multiple signing events (CVE-2026-12205,         CWE-323)
        - sign() reused the DSA nonce k across signatures (r and k^-1 were cached           on the key and not regenerated), allowing private-key recovery from two           signatures over different messages
        - Now generates a fresh nonce per signature
        - Keys used to sign more than once with an affected version should be           considered compromised
    * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.20-2
    - Rebuilt for openssl 4.0

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
322355	Fedora 44 : perl-Crypt-DSA (2026-f4a6b0c635)	Nessus	Fedora Local Security Checks	critical
322354	Fedora 43 : perl-Crypt-DSA (2026-5cf57e43e3)	Nessus	Fedora Local Security Checks	critical
321125	Linux Distros Unpatched Vulnerability : CVE-2026-12205	Nessus	Misc.	critical
321099	Fedora 45 : perl-Crypt-DSA (2026-cf622b92d7)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2026-12205

critical

Tenable Plugins

critical

critical

critical

critical