Lucene search
FreeBSDC0F122E2-3897-11E3-A084-3C970E169BC2HistoryOct 17, 2013 - 12:00 a.m.
pycrypto -- PRNG reseed race condition
2013-10-1700:00:00
vuxml.freebsd.org
18
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.001
Percentile
48.8%
Dwayne Litzenberger reports:
In PyCrypto before v2.6.1, the Crypto.Random pseudo-random
number generator (PRNG) exhibits a race condition that may cause
it to generate the same ‘random’ output in multiple processes that
are forked from each other. Depending on the application, this
could reveal sensitive information or cryptographic keys to remote
attackers.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | py26-pycrypto | < 2.6.1 | UNKNOWN |
| FreeBSD | any | noarch | py27-pycrypto | < 2.6.1 | UNKNOWN |
| FreeBSD | any | noarch | py31-pycrypto | < 2.6.1 | UNKNOWN |
| FreeBSD | any | noarch | py32-pycrypto | < 2.6.1 | UNKNOWN |
| FreeBSD | any | noarch | py33-pycrypto | < 2.6.1 | UNKNOWN |
Related
securityvulns
securityvulns
pycrypto PRNG vulnerabilities
2013-11-05 00:00:00
[ MDVSA-2013:262 ] python-pycrypto
2013-11-05 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2781-1)
2013-10-17 00:00:00
Fedora Update for python-crypto FEDORA-2013-19472
2013-10-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-243)
2015-09-08 00:00:00
cvelist
cvelist
CVE-2013-1445
2013-10-26 17:00:00
cve
cve
CVE-2013-1445
2013-10-26 17:55:03
github
github
PyCrypto does not properly reseed PRNG before allowing access
2022-05-17 04:59:18
amazon
amazon
Low: python-crypto
2013-11-03 12:09:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-crypto-2.6.1-1.fc20
2013-11-10 07:05:58
[SECURITY] Fedora 19 Update: python-crypto-2.6.1-1.fc19
2013-10-27 03:58:02
[SECURITY] Fedora 18 Update: python-crypto-2.6.1-1.fc18
2013-10-27 04:01:42
ubuntucve
ubuntucve
CVE-2013-1445
2013-10-26 00:00:00
osv
osv
PYSEC-2013-29
2013-10-26 17:55:00
PyCrypto does not properly reseed PRNG before allowing access
2022-05-17 04:59:18
nessus
nessus
Fedora 20 : python-crypto-2.6.1-1.fc20 (2013-19390)
2013-11-11 00:00:00
Amazon Linux AMI : python-crypto (ALAS-2013-243)
2013-11-14 00:00:00
debiancve
debiancve
CVE-2013-1445
2022-10-03 16:14:47
nvd
nvd
CVE-2013-1445
2013-10-26 17:55:03
mageia
mageia
Updated python-pycrypto packages fix CVE-2013-1445
2013-10-26 01:13:58
prion
prion
Race condition
2013-10-26 17:55:00
debian
debian
[SECURITY] [DSA 2781-1] python-crypto security update
2013-10-18 19:40:25
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.001
Percentile
48.8%
Related for C0F122E2-3897-11E3-A084-3C970E169BC2