Lucene search
+L

1 matches found

OSV
OSV
added 2017/02/02 8:11 a.m.12 views

MGASA-2017-0032 Updated python-pycrypto packages fix security vulnerabilities

This is a security fix for a possible Buffer overflow. AES.new with invalid parameter crashes python. The IV parameter is currently ignored when initializing a cipher in ECB or CTR mode. There was a bug in pycrypto which could be exploited to get a shell...

9.8CVSS9.4AI score0.09501EPSS
SaveExploits1References5
Rows per page
Query Builder