Skip to main content
VulnerabilityPublished

CVE-2024-56830: libnet-easytcp-perl vulnerability

Affects libnet-easytcp-perlSource GCVE Database

0
Compare

Not known to be exploited · fixed in 0.26-3ubuntu0.1~esm1 : patch libnet-easytcp-perl soon.

Data as of 4 Nov 2026, 04:01 UTC

Severity
High

Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD

Patch
Available – fixed in 0.26-3ubuntu0.1~esm1, 0.26-4ubuntu0.18.04.1~esm1, 0.26-4ubuntu0.20.04.1~esm1 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 3 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 3 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
Ubuntu 24.04 LTSlibnet-easytcp-perlpkg:deb/ubuntu/libnet-easytcp-perl?arch=source&distro=nobleOther threatsAffected
  • <0.26-6+deb11u1build0.24.04.1
Fixed in
  • 0.26-6+deb11u1build0.24.04.1
Ubuntu Pro 22.04 LTSlibnet-easytcp-perlpkg:deb/ubuntu/libnet-easytcp-perl?arch=source&distro=esm-apps/jammyOther threatsAffected
  • <0.26-4ubuntu0.22.04.1~esm1
Fixed in
  • 0.26-4ubuntu0.22.04.1~esm1
Ubuntu Pro 20.04 LTSlibnet-easytcp-perlpkg:deb/ubuntu/libnet-easytcp-perl?arch=source&distro=esm-apps/focalOther threatsAffected
  • <0.26-4ubuntu0.20.04.1~esm1
Fixed in
  • 0.26-4ubuntu0.20.04.1~esm1
Ubuntu Pro 18.04 LTSlibnet-easytcp-perlpkg:deb/ubuntu/libnet-easytcp-perl?arch=source&distro=esm-apps/bionicOther threatsAffected
  • <0.26-4ubuntu0.18.04.1~esm1
Fixed in
  • 0.26-4ubuntu0.18.04.1~esm1
Ubuntu Pro 16.04 LTSlibnet-easytcp-perlpkg:deb/ubuntu/libnet-easytcp-perl?arch=source&distro=esm-apps-legacy/xenialOther threatsAffected
  • <0.26-3ubuntu0.1~esm1
Fixed in
  • 0.26-3ubuntu0.1~esm1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Apply the official patches by updating libnet-easytcp-perl to the fixed versions listed in the Ubuntu advisory USN-8985-1. For Ubuntu Pro users, fixes are available via Extended Security Maintenance (ESM) Apps. A standard system update will apply the necessary changes. No additional mitigation steps are required once the update is applied.

Description

Net::EasyTCP, a Perl module for creating TCP/IP clients and servers, used the built-in Perl rand() function to generate encryption keys when no strong randomization module was present. This weak randomization could allow an attacker to predict encryption keys and potentially obtain sensitive information. The issue affects multiple Ubuntu LTS releases and has been fixed in updated package versions.

References

Community reviews

Loading reviews…