CVE-2020-13895

Name of the Vulnerable Software and Affected Versions Crypt::Perl versions prior to 0.32

Description The issue is related to the verification of ECDSA signatures. Specifically, when using the curve secp256r1 (prime256v1), the verification may fail when r and s are small and when s equals 1. This could potentially have security implications if an attacker attempts to exploit this behavior by using public r and s values to guess whether signature verification will fail.

Recommendations For versions prior to 0.32, update to version 0.32 or later to resolve the issue.