150 matches found
CVE-2018-15560
PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...
PyCryptodome Integer Overflow Vulnerability
PyCryptodome is a cryptographic package for Python consisting of low-level cryptographic primitives. An integer overflow vulnerability exists in the datalen variable of the AESNI.c file in PyCryptodome versions prior to 3.6.6. An attacker can exploit this vulnerability with the help of messages...
CVE-2018-15560
PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...
CVE-2018-15560
PyCryptodome before 3.6.6 has an integer overflow in the datalen variable in AESNI.c, related to the AESNIencrypt and AESNIdecrypt functions, leading to the mishandling of messages shorter than 16 bytes...
Updated python-pycrypto packages fix security vulnerability
The textbook ElGamal implementation is not secure. PyCrypto and some other implementations use the wrong algorithm, which may lead to some information disclosure simply by looking at the encrypted text. For a full description, see https://github.com/dlitz/pycrypto/issues/253 This update includes ...
Fedora 26 : python-crypto (2018-0c75cc72bc)
The textbook ElGamal implementation is not secure. PyCrypto and some other implementations use the wrong algorithm, which may lead to some information disclosure simply by looking at the encrypted text. For a full description, see https://github.com/dlitz/pycrypto/issues/253 This update includes ...
Fedora 27 : python-crypto (2018-913c225b49)
The textbook ElGamal implementation is not secure. PyCrypto and some other implementations use the wrong algorithm, which may lead to some information disclosure simply by looking at the encrypted text. For a full description, see https://github.com/dlitz/pycrypto/issues/253 This update includes ...
Weak ElGamal Cryptography
Pycryptodome uses weak ElGamal cryptography. Due to an incorrect implementation of ElGamal, the Decisional Diffie-Hellman DDH assumption doesnt hold because of the way the key parameters are generated. This allows attackers who have access to the cipher-text to decrypt the messages and potentiall...
