{"id":"UBUNTU-CVE-2025-40924","details":"Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a (usually SHA-1) hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low entropy. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems.","modified":"2026-05-20T16:23:24.733207408Z","published":"2025-07-17T14:15:00Z","upstream":["CVE-2025-40924"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-40924"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2025-40924"},{"type":"REPORT","url":"https://github.com/perl-catalyst/Catalyst-Plugin-Session/commit/c0e2b4ab1e42ebce1008286db8c571b6ee98c22c.patch"},{"type":"REPORT","url":"https://github.com/perl-catalyst/Catalyst-Plugin-Session/pull/5"},{"type":"REPORT","url":"https://metacpan.org/release/HAARG/Catalyst-Plugin-Session-0.43/source/lib/Catalyst/Plugin/Session.pm#L632"}],"affected":[{"package":{"name":"libcatalyst-plugin-session-perl","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/libcatalyst-plugin-session-perl?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.40-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libcatalyst-plugin-session-perl","binary_version":"0.40-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-40924.json"}},{"package":{"name":"libcatalyst-plugin-session-perl","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/libcatalyst-plugin-session-perl?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.40-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libcatalyst-plugin-session-perl","binary_version":"0.40-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-40924.json"}},{"package":{"name":"libcatalyst-plugin-session-perl","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/libcatalyst-plugin-session-perl?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.41-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.41-1","binary_name":"libcatalyst-plugin-session-perl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-40924.json"}},{"package":{"name":"libcatalyst-plugin-session-perl","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/libcatalyst-plugin-session-perl?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.41-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libcatalyst-plugin-session-perl","binary_version":"0.41-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-40924.json"}},{"package":{"name":"libcatalyst-plugin-session-perl","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/libcatalyst-plugin-session-perl?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.43-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.43-1","binary_name":"libcatalyst-plugin-session-perl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-40924.json"}},{"package":{"name":"libcatalyst-plugin-session-perl","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/libcatalyst-plugin-session-perl?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.43-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.43-1","binary_name":"libcatalyst-plugin-session-perl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-40924.json"}},{"package":{"name":"libcatalyst-plugin-session-perl","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/libcatalyst-plugin-session-perl?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.43-1","0.44-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.44-1","binary_name":"libcatalyst-plugin-session-perl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-40924.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"type":"Ubuntu","score":"medium"}]}