Skip to content
OpenAdvisories

Package · Ubuntu

python-crypto

2 known vulnerabilities.

2 results · Feed

  • High 7.5

    Pycrypto generates weak key parameters

    lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). …

  • Critical 9.8

    Buffer Overflow in pycrypto

    Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.