Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes(). The function does not validate that the length parameter is non-negative. If a negative value (e.g. -1) is supplied, the expression length + 1u causes an integer wraparound, resulting in a zero-byte allocation. The subsequent call to chosen random function (e.g. getrandom) passes the original negative value, which is implicitly converted to a large unsigned value (typically SIZE_MAX). This can result in writes beyond the allocated buffer, leading to heap memory corruption and application crash (denial of service). In common usage, the length argument is typically hardcoded by the caller, which reduces the likelihood of attacker-controlled exploitation. Applications that pass untrusted input to this parameter may be affected.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c0123ede74 advisory.

    0.011 - Update data pointer on resize for rdrand; Clean up string length handling     0.010 - Disallow requesting strings with negative lengths CVE-2026-2597;  Try arc4random in stdlib.h     first; Correct value of PROTOTYPES keyword in XS

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7b9874a01f advisory.

    0.011 - Update data pointer on resize for rdrand; Clean up string length handling     0.010 - Disallow requesting strings with negative lengths CVE-2026-2597;  Try arc4random in stdlib.h     first; Correct value of PROTOTYPES keyword in XS

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS     function random_bytes(). The function does not validate that the length parameter is non-negative. If a     negative value (e.g. -1) is supplied, the expression length + 1u causes an integer wraparound, resulting     in a zero-byte allocation. The subsequent call to chosen random function (e.g. getrandom) passes the     original negative value, which is implicitly converted to a large unsigned value (typically SIZE_MAX).
    This can result in writes beyond the allocated buffer, leading to heap memory corruption and application     crash (denial of service). In common usage, the length argument is typically hardcoded by the caller,     which reduces the likelihood of attacker-controlled exploitation. Applications that pass untrusted input     to this parameter may be affected. (CVE-2026-2597)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
301801	Fedora 42 : perl-Crypt-SysRandom-XS (2026-c0123ede74)	Nessus	Fedora Local Security Checks	high
301796	Fedora 43 : perl-Crypt-SysRandom-XS (2026-7b9874a01f)	Nessus	Fedora Local Security Checks	high
299748	Linux Distros Unpatched Vulnerability : CVE-2026-2597	Nessus	Misc.	high

Detections

Analytics

CVE-2026-2597

high

Tenable Plugins

high

high

high