Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Dlitz Component: Pycrypto Clear all filters
TI-2013-06111 CVE-2013-7459 · GHSA-cq27-v7xp-c356

Heap-based buffer overflow in the ALGnew function in block_templace.c in Python…

Priority MEDIUM 54

Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.09578 Published 2017-02-15 Will not fix CWE-119
TI-2013-01262 CVE-2013-1445 · GHSA-x377-f64p-hf5j

The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the…

Priority LOW 24

The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent atta…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01738 Published 2013-10-26 Fixed in 2.6.1 CWE-310
TI-2012-02143 CVE-2012-2417 · GHSA-v367-p58w-98h5

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal…

Priority LOW 25

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute forc…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02357 Published 2012-06-17 Partial fix · 2.6 CWE-310