medium6.5
CVE-2025-40913
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow.
Impact
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
Affected products
| Product | Affected versions |
|---|---|
| Net::Dropbear | through 0.16 |
Versions were read from the advisory text. No structured product data has been published for this record yet.