PyCrypto vulnerability

2012-06-2800:00:00

ubuntu.com

9.5 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.3%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04

Packages

python-crypto - cryptographic algorithms and protocols for Python

Details

It was discovered that PyCrypto produced inappropriate prime numbers when
generating ElGamal keys. An attacker could use this flaw to facilitate
brute-forcing of ElGamal encryption keys.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchpython-crypto< 2.4.1-1ubuntu0.1UNKNOWN
Ubuntu12.04noarchpython-crypto-dbg< 2.4.1-1ubuntu0.1UNKNOWN
Ubuntu12.04noarchpython3-crypto< 2.4.1-1ubuntu0.1UNKNOWN
Ubuntu12.04noarchpython3-crypto-dbg< 2.4.1-1ubuntu0.1UNKNOWN
Ubuntu11.10noarchpython-crypto< 2.3-2ubuntu0.1UNKNOWN
Ubuntu11.10noarchpython-crypto-dbg< 2.3-2ubuntu0.1UNKNOWN
Ubuntu11.04noarchpython-crypto< 2.1.0-2ubuntu1.1UNKNOWN
Ubuntu11.04noarchpython-crypto-dbg< 2.1.0-2ubuntu1.1UNKNOWN
Ubuntu10.04noarchpython-crypto< 2.0.1+dfsg1-4ubuntu2.2UNKNOWN
Ubuntu10.04noarchpython-crypto-dbg< 2.0.1+dfsg1-4ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	python-crypto	< 2.4.1-1ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	python-crypto-dbg	< 2.4.1-1ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	python3-crypto	< 2.4.1-1ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	python3-crypto-dbg	< 2.4.1-1ubuntu0.1	UNKNOWN
Ubuntu	11.10	noarch	python-crypto	< 2.3-2ubuntu0.1	UNKNOWN
Ubuntu	11.10	noarch	python-crypto-dbg	< 2.3-2ubuntu0.1	UNKNOWN
Ubuntu	11.04	noarch	python-crypto	< 2.1.0-2ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	python-crypto-dbg	< 2.1.0-2ubuntu1.1	UNKNOWN
Ubuntu	10.04	noarch	python-crypto	< 2.0.1+dfsg1-4ubuntu2.2	UNKNOWN
Ubuntu	10.04	noarch	python-crypto-dbg	< 2.0.1+dfsg1-4ubuntu2.2	UNKNOWN