Security Advisories (1)
CVE-2024-57854 (2026-03-05)

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand() function, which is not suitable for cryptographic functions.

Changes for version 0.002

  • FIX: All Moose classes are now immutable
  • FIX: Creating a Net::NSCA::Client::InitialPacket without an IV would cause an error since the default ended up being a Math::Pari object [NOTE: This only would have affected code which explicitly created a Net::NSCA::Client::InitialPacket object]
  • Added a public constant $INITIALIZATION_VECTOR_LENGTH to Net::NSCA::Client::InitialPacket
  • initialization_vector attribute in Net::NSCA::Client::InitialPacket is now always exactly 128 bytes.
  • Fixed documentation in Net::NSCA::Client::DataPacket to specify all required attributes.
  • Added SEE ALSO section in Net::NSCA::Client
  • Added tests for many pieces of the objects and for packet reading and creation.

Modules

Send passive checks to Nagios locally and remotely.
Represents a connection between the client and the server.
Represents the transport layer security on a connection.
Implements data packet for the NSCA protocol
Implements initial packet for the NSCA protocol