Skip to content
OpenAdvisories
Critical USN-3199-1 1 CVE

Python Crypto vulnerability

Published Feb 16, 2017 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the ALGnew function in block_templace.c in the Python
Cryptography Toolkit contained a heap-based buffer overflow vulnerability.
A remote attacker could use this flaw to execute arbitrary code by using
a crafted initialization vector parameter.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS python-crypto 2.6.1-4ubuntu0.1
Ubuntu · 16.04 LTS 16.04:LTS python-crypto 2.6.1-6ubuntu0.16.04.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2013-7459

    Buffer Overflow in pycrypto

    Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.

    pycrypto python-crypto Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2013-7459