Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

pycrypto

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
PyPI

Advisories 4

  • lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain…

    Affected: through 2.6.1; all versions.

  • Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote…

    Affected: all versions; through 2.6.1.

  • The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before…

    Affected: fixed in 2.6.1; fixed in 2.6.1.

  • PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature…

    Affected: fixed in 2.6; fixed in 2.6.