Skip to content
OpenAdvisories
High USN-3616-1 1 CVE

python-crypto vulnerability

Published Apr 3, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Python Crypto incorrectly generated ElGamal key
parameters. A remote attacker could possibly use this issue to obtain
sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS python-crypto 2.6.1-4ubuntu0.3
Ubuntu · 16.04 LTS 16.04:LTS python-crypto 2.6.1-6ubuntu0.16.04.3

Vulnerabilities 1

  • High 7.5
    CVE-2018-6594

    Pycrypto generates weak key parameters

    lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). …

    pycrypto pycryptodome pycryptodome python-crypto Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2018-6594