Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom(). The function does not validate that the length parameter is non-negative. If a negative value (e.g. -1) is supplied, the expression length + 1u causes an integer wraparound, resulting in a zero-byte allocation. The subsequent call to getrandom(data, length, GRND_NONBLOCK) passes the original negative value, which is implicitly converted to a large unsigned value (typically SIZE_MAX). This can result in writes beyond the allocated buffer, leading to heap memory corruption and application crash (denial of service). In common usage, the length argument is typically hardcoded by the caller, which reduces the likelihood of attacker-controlled exploitation. Applications that pass untrusted input to this parameter may be affected.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eb6b1039eb advisory.

    This release fixes CVE-2026-2474 (a heap buffer overflow) and handling failed read syscalls.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-88f1155b8b advisory.

    This release fixes CVE-2026-2474 (a heap buffer overflow) and handling failed read syscalls.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b0bf6e9c9b advisory.

    This release fixes CVE-2026-2474 (a heap buffer overflow) and handling failed read syscalls.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS     function crypt_urandom_getrandom(). The function does not validate that the length parameter is non-     negative. If a negative value (e.g. -1) is supplied, the expression length + 1u causes an integer     wraparound, resulting in a zero-byte allocation. The subsequent call to getrandom(data, length,     GRND_NONBLOCK) passes the original negative value, which is implicitly converted to a large unsigned value     (typically SIZE_MAX). This can result in writes beyond the allocated buffer, leading to heap memory     corruption and application crash (denial of service). In common usage, the length argument is typically     hardcoded by the caller, which reduces the likelihood of attacker-controlled exploitation. Applications     that pass untrusted input to this parameter may be affected. (CVE-2026-2474)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
301450	Fedora 44 : perl-Crypt-URandom (2026-eb6b1039eb)	Nessus	Fedora Local Security Checks	high
300906	Fedora 43 : perl-Crypt-URandom (2026-88f1155b8b)	Nessus	Fedora Local Security Checks	high
300873	Fedora 42 : perl-Crypt-URandom (2026-b0bf6e9c9b)	Nessus	Fedora Local Security Checks	high
299287	Linux Distros Unpatched Vulnerability : CVE-2026-2474	Nessus	Misc.	high

Detections

Analytics

CVE-2026-2474

high

Tenable Plugins

high

high

high

high