Tag Verification Bypass in CryptX module before 0.062

CVE-2018-25099

Summary

The CryptX module in Perl, prior to version 0.062, contains a vulnerability where the functions gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() fail to properly validate the integrity of the cryptographic tag. This oversight could potentially allow an attacker to perform unauthorized actions or manipulate encrypted data without detection. It is crucial for users of the affected versions to upgrade to the latest version to ensure the integrity and security of their cryptographic operations.

References