Lucene search
GoogleOSV:PYSEC-2013-29HistoryOct 26, 2013 - 5:55 p.m.
PYSEC-2013-29
2013-10-2617:55:00
Google
osv.dev
8
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process.
Related
securityvulns
securityvulns
pycrypto PRNG vulnerabilities
2013-11-05 00:00:00
[ MDVSA-2013:262 ] python-pycrypto
2013-11-05 00:00:00
cve
cve
CVE-2013-1445
2013-10-26 17:55:00
github
github
PyCrypto does not properly reseed PRNG before allowing access
2022-05-17 04:59:18
openvas
openvas
Debian: Security Advisory (DSA-2781-1)
2013-10-17 00:00:00
Fedora Update for python-crypto FEDORA-2013-19472
2013-10-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-243)
2015-09-08 00:00:00
cvelist
cvelist
CVE-2013-1445
2022-10-03 16:14:47
fedora
fedora
[SECURITY] Fedora 20 Update: python-crypto-2.6.1-1.fc20
2013-11-10 07:05:58
[SECURITY] Fedora 18 Update: python-crypto-2.6.1-1.fc18
2013-10-27 04:01:42
[SECURITY] Fedora 19 Update: python-crypto-2.6.1-1.fc19
2013-10-27 03:58:02
ubuntucve
ubuntucve
CVE-2013-1445
2013-10-26 00:00:00
amazon
amazon
Low: python-crypto
2013-11-03 12:09:00
nessus
nessus
Fedora 20 : python-crypto-2.6.1-1.fc20 (2013-19390)
2013-11-11 00:00:00
Mandriva Linux Security Advisory : python-pycrypto (MDVSA-2013:262)
2013-10-29 00:00:00
osv
osv
PyCrypto does not properly reseed PRNG before allowing access
2022-05-17 04:59:18
debiancve
debiancve
CVE-2013-1445
2013-10-26 17:55:00
prion
prion
Race condition
2013-10-26 17:55:00
debian
debian
[SECURITY] [DSA 2781-1] python-crypto security update
2013-10-18 19:41:57
freebsd
freebsd
pycrypto -- PRNG reseed race condition
2013-10-17 00:00:00
mageia
mageia
Updated python-pycrypto packages fix CVE-2013-1445
2013-10-26 01:13:58
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
Related for OSV:PYSEC-2013-29