Buffer Overflow in pycrypto

🗓️ 14 Dec 2018 18:51:38Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 42 Views

Heap-based buffer overflow in pycrypto ALGnew functio

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS Product	15 Jul 202515:44	–	ibm
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in pycrypto-2.6.1.tar.gz affects IBM Integrated Analytics System [CVE-2013-7459, CVE-2018-6594]	17 Oct 202311:23	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in PyCrypto affects PowerKVM	18 Jun 201801:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in software used in node.js affect Cloud Pak System	31 Mar 202314:17	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affecting IBM Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:35	–	ibm
Tenable Nessus	Amazon Linux 2 : python-crypto (ALASANSIBLE2-2024-011)	24 Jun 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : python-crypto (ALAS-2017-801)	7 Mar 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : python-crypto (EulerOS-SA-2018-1168)	28 Jun 201800:00	–	nessus

Vulners

Node

dlitz pycryptoRange≤2.6.1pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-7459
github	www.github.com/dlitz/pycrypto/issues/176
github	www.github.com/dlitz/pycrypto/commit/8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-cq27-v7xp-c356
security	www.security.gentoo.org/glsa/201702-14
openwall	www.openwall.com/lists/oss-security/2016/12/27/8
github	www.github.com/pypa/advisory-database/tree/main/vulns/pycrypto/PYSEC-2017-94.yaml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/C6BWNADPLKDBBQBUT3P75W7HAJCE7M3B
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/RJ37R2YLX56YZABFNAOWV4VTHTGYREAE

18 Oct 2024 22:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5

CVSS 39.8

EPSS0.13624

buffer overflow python cryptography toolkit remote attackers arbitrary code crafted parameter cryptmsg.py