Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2417

Опубликовано: 17 июн. 2012
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dlitz:pycrypto:*:*:*:*:*:*:*:*
Версия до 2.5 (включая)
cpe:2.3:a:dlitz:pycrypto:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.1:alpha2:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha1:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha2:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha3:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha4:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha5:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha6:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.0:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:beta1:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.2:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.3:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.4:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.04088
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

ubuntu
больше 13 лет назад

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

redhat
почти 14 лет назад

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

debian
больше 13 лет назад

PyCrypto before 2.6 does not produce appropriate prime numbers when us ...

CVSS3: 5.3
github
больше 3 лет назад

PyCrypto makes Use of Insufficiently Random Values

EPSS

Процентиль: 88%
0.04088
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310