Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow

Net::Dropbear, a Perl module for SSH connections, includes an outdated math library that has a bug where large numbers can cause unexpected behavior, potentially leading to crashes or security issues.

Net::Dropbear versions ≤0.16 bundle a vulnerable version of libtommath (CVE-2023-36328) susceptible to integer overflow. The vulnerability exists in the embedded cryptographic library used during SSH operations; exploitation requires processing specially crafted numerical values during key exchange or authentication, potentially resulting in denial of service or memory corruption.