PT-2025-29831 · Unknown+3 · Authen::Sasl::Perl::Digest Md5+3

Robrwo · Published 2025-07-16 · Updated 2026-05-22 · CVE-2025-40918

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Authen::SASL::Perl::DIGEST MD5 versions 2.04 through 2.1800

Description The cnonce (client nonce) is generated insecurely from an MD5 hash of the PID, the epoch time, and the built-in rand function. The PID originates from a limited set of numbers, and the epoch time may be predictable. The rand function is unsuitable for cryptographic purposes. According to RFC 2831, the cnonce should contain at least 64 bits of entropy to prevent chosen plaintext attacks and ensure mutual authentication.

Recommendations Versions prior to 2.1800 are affected. Update to a version later than 2.1800.

Fix

DoS

Weakness Enumeration

CWE-340

CWE-338

Related Identifiers

AZL-65541

BDU:2025-10918

CVE-2025-40918

MGASA-2025-0285

OESA-2026-2422

OESA-2026-2423

OPENSUSE-SU-2025:15385-1

OPENSUSE-SU-2026:20480-1

SUSE-SU-2025:03087-1

SUSE-SU-2025:03088-1

SUSE-SU-2025_03087-1

SUSE-SU-2025_03088-1

SUSE-SU-2026:21145-1

Affected Products

Authen::Sasl::Perl::Digest Md5

Debian

Red Os

Suse

References · 46

• https://osv.dev/vulnerability/SUSE-SU-2026:21145-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03087-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-40918 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15385-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-40918 · Security Note
• https://ubuntu.com/security/CVE-2025-40918 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03088-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2423 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2422 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0285.html · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2025-40918 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-65541 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-40918 · Vendor Advisory
• https://security.metacpan.org/patches/A/Authen-SASL/2.1800/CVE-2025-40918-r1.patch · Patch
• https://osv.dev/vulnerability/BELL-CVE-2025-40918 · Vendor Advisory