Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2417

Опубликовано: 17 июн. 2012
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dlitz:pycrypto:*:*:*:*:*:*:*:*
Версия до 2.5 (включая)
cpe:2.3:a:dlitz:pycrypto:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.1:alpha2:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha1:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha2:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha3:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha4:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha5:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:1.9:alpha6:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.0:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.1.0:beta1:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.2:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.3:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.4:*:*:*:*:*:*:*
cpe:2.3:a:dlitz:pycrypto:2.4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 82%
0.02393
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

ubuntu
около 14 лет назад

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

redhat
больше 14 лет назад

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

debian
около 14 лет назад

PyCrypto before 2.6 does not produce appropriate prime numbers when us ...

CVSS3: 5.3
github
около 4 лет назад

PyCrypto makes Use of Insufficiently Random Values

EPSS

Процентиль: 82%
0.02393
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310