SUSE CVE-2018-15560

PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...

Fedora 28 : python-pycryptodomex (2018-8fd21e2a72)

Security fix for CVE-2018-15560 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 29 : python-pycryptodomex (2018-4f06058324)

Security fix for CVE-2018-15560 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 27 : python-pycryptodomex (2018-a42eb4ac61)

Security fix for CVE-2018-15560 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

CVE-2018-15560

CVE-2018-15560 affects PyCryptodome prior to 3.6.6. The vulnerability is an integer overflow in the data_len variable of AESNI.c, related to AESNI_encrypt and AESNI_decrypt, causing mishandling of messages shorter than 16 bytes. Fedora advisories and Nessus/OpenVAS entries reference security fixe...