PY
Product
Pycrypto
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add Pycrypto to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-7459 | 9.8 | Feb 15 | Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as… Affected: through 2.6.1 |
| CVE-2018-6594 | 7.5 | Feb 3 | lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data… Affected: through 2.6.1 |
| CVE-2013-1445 | – | Oct 26 | The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which… Affected: through 2.6; 1.0.0; 1.0.1; 1.0.2; 2.0; 2.0.1; +6 more |
| CVE-2012-2417 | – | Jun 17 | PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it… Affected: through 2.5; 1.0.0; 1.0.1; 1.0.2; 1.1; 1.9; +15 more |
Showing 4