Unscored severity · published Jun 17, 2012
CVE-2012-2417
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it…
–
CVSS
2.4%
EPSS
No
On KEV
Description
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PY
Pycrypto · Dlitz
through 2.5; 1.0.0; 1.0.1; 1.0.2; 1.1; 1.9; +15 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2417
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2417
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081713.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081759.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081789.html
Vendor Advisory
http://secunia.com/advisories/49263
www.debian.org
http://www.debian.org/security/2012/dsa-2502
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2012:117
More from Pycrypto
9.8
CVE-2013-7459
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as…
7.5
CVE-2018-6594
lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data…
–
CVE-2013-1445
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which…