Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values." An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack. Keys used to sign with an affected version should be considered compromised and new keys should be generated.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fcfc08d46c advisory.

    This update, to the current upstream release, addresses a cryptographic flaw (modulo bias) in key     generation that could lead to private key compromise (CVE-2026-14570) .


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b77b9c5f04 advisory.

    This update, to the current upstream release, addresses a cryptographic flaw (modulo bias) in key     generation that could lead to private key compromise (CVE-2026-14570) .


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random     generator, leading to private-key recovery. Crypt::DSA::Util::makerandom forces the high bit of every     value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private     key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit     is fixed, producing insecure values. An attacker who collects a modest number of signatures under an     affected key, together with the public key, can recover the private key with a lattice attack. Keys used     to sign with an affected version should be considered compromised and new keys should be generated.
    (CVE-2026-14570)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
326406	Fedora 44 : perl-Crypt-DSA (2026-fcfc08d46c)	Nessus	Fedora Local Security Checks	high
326405	Fedora 43 : perl-Crypt-DSA (2026-b77b9c5f04)	Nessus	Fedora Local Security Checks	high
325328	Linux Distros Unpatched Vulnerability : CVE-2026-14570	Nessus	Misc.	high

Detections

Analytics

CVE-2026-14570

high

Tenable Plugins

high

high

high