Skip to content
OpenAdvisories
High DSA-2781-1 1 CVE

python-crypto - PRNG not correctly reseeded in some situations

Published Oct 15, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 python-crypto 2.1.0-2+squeeze2
Debian · 7 python-crypto 2.6-4+deb7u1

Vulnerabilities 1

  • High 7.5
    CVE-2013-1445

    PyCrypto does not properly reseed PRNG before allowing access

    The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information b…

    pycrypto PyPI