Python Crypto vulnerability

2009-03-0500:00:00

ubuntu.com

7.3 High

AI Score

Confidence

Low

0.321 Low

EPSS

Percentile

97.0%

JSON

Releases

Ubuntu 8.10
Ubuntu 8.04
Ubuntu 7.10
Ubuntu 6.06

Packages

python-crypto -

Details

Mike Wiacek discovered that the ARC2 implementation in Python Crypto
did not correctly check the key length. If a user or automated system
were tricked into processing a malicious ARC2 stream, a remote attacker
could execute arbitrary code or crash the application using Python Crypto,
leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchpython-crypto< 2.0.1+dfsg1-2.3ubuntu0.1UNKNOWN
Ubuntu8.10noarchpython-crypto-dbg< 2.0.1+dfsg1-2.3ubuntu0.1UNKNOWN
Ubuntu8.04noarchpython-crypto< 2.0.1+dfsg1-2.1ubuntu1.1UNKNOWN
Ubuntu8.04noarchpython-crypto-dbg< 2.0.1+dfsg1-2.1ubuntu1.1UNKNOWN
Ubuntu7.10noarchpython-crypto< 2.0.1+dfsg1-2ubuntu1.1UNKNOWN
Ubuntu7.10noarchpython-crypto-dbg< 2.0.1+dfsg1-2ubuntu1.1UNKNOWN
Ubuntu6.06noarchpython2.4-crypto< 2.0.1+dfsg1-1ubuntu1.1UNKNOWN
Ubuntu6.06noarchpython-crypto< 2.0.1+dfsg1-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	python-crypto	< 2.0.1+dfsg1-2.3ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	python-crypto-dbg	< 2.0.1+dfsg1-2.3ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	python-crypto	< 2.0.1+dfsg1-2.1ubuntu1.1	UNKNOWN
Ubuntu	8.04	noarch	python-crypto-dbg	< 2.0.1+dfsg1-2.1ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	python-crypto	< 2.0.1+dfsg1-2ubuntu1.1	UNKNOWN
Ubuntu	7.10	noarch	python-crypto-dbg	< 2.0.1+dfsg1-2ubuntu1.1	UNKNOWN
Ubuntu	6.06	noarch	python2.4-crypto	< 2.0.1+dfsg1-1ubuntu1.1	UNKNOWN
Ubuntu	6.06	noarch	python-crypto	< 2.0.1+dfsg1-1ubuntu1.1	UNKNOWN