Lucene search
Gentoo FoundationGLSA-201206-23HistoryJun 24, 2012 - 12:00 a.m.
PyCrypto: Weak key generation
2012-06-2400:00:00
Gentoo Foundation
security.gentoo.org
18
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.6%
Background
PyCrypto is the Python Cryptography Toolkit.
Description
An error in the generate() function in ElGamal.py causes PyCrypto to generate weak ElGamal keys.
Impact
A remote attacker might be able to derive private keys.
Workaround
There is no known workaround at this time.
Resolution
All PyCrypto users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-python/pycrypto-2.6"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | dev-python/pycrypto | <Β 2.6 | UNKNOWN |
Related
nessus
nessus
Debian DSA-2502-1 : python-crypto - programming error
2012-06-29 00:00:00
Fedora 16 : python-crypto-2.3-6.fc16 (2012-8470)
2012-06-04 00:00:00
Fedora 15 : python-crypto-2.3-6.fc15 (2012-8490)
2012-06-04 00:00:00
openvas
openvas
FreeBSD Ports: py-pycrypto
2012-08-10 00:00:00
Ubuntu Update for python-crypto USN-1484-1
2012-07-03 00:00:00
Gentoo Security Advisory GLSA 201206-23 (pycrypto)
2012-08-10 00:00:00
amazon
amazon
Medium: python-crypto
2012-06-11 10:27:00
fedora
fedora
[SECURITY] Fedora 15 Update: python-crypto-2.3-6.fc15
2012-06-03 23:28:10
[SECURITY] Fedora 16 Update: python-crypto-2.3-6.fc16
2012-06-03 23:34:31
[SECURITY] Fedora 17 Update: python-crypto-2.6-1.fc17
2012-06-03 00:00:59
prion
prion
Design/Logic Flaw
2012-06-17 03:41:00
freebsd
freebsd
pycrypto -- vulnerable ElGamal key generation
2012-05-24 00:00:00
debian
debian
[SECURITY] [DSA 2502-1] python-crypto security update
2012-06-24 20:37:16
ubuntucve
ubuntucve
CVE-2012-2417
2012-06-16 00:00:00
debiancve
debiancve
CVE-2012-2417
2012-06-17 03:41:40
seebug
seebug
Python PyCryptoε―ι₯ηζζΌζ΄
2012-05-29 00:00:00
osv
osv
PYSEC-2012-16
2012-06-17 03:41:00
cvelist
cvelist
CVE-2012-2417
2012-06-17 01:00:00
nvd
nvd
CVE-2012-2417
2012-06-17 03:41:40
github
github
PyCrypto makes Use of Insufficiently Random Values
2022-05-17 01:46:08
cve
cve
CVE-2012-2417
2012-06-17 03:41:40
ubuntu
ubuntu
PyCrypto vulnerability
2012-06-28 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:117 ] python-pycrypto
2012-07-29 00:00:00
python multiple security vulnerabilities
2012-07-29 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.6%
Related for GLSA-201206-23