CVE-2020-17478

CVE-2020-17478 describes a timing attack vulnerability in Crypt::Perl versions prior to 0.33, specifically within the ECDSA/EC/Point.pm module's EC point multiplication algorithm. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to potentially extract sensitive cryptographic information remotely due to the timing differences in cryptographic operations. While no public exploit code, Metasploit modules, or Nuclei templates are available, and there's no evidence of active exploitation or significant community discussion, the potential for high confidentiality impact remains.