4.3
CVE-2012-2417
- EPSS 2.39%
- Veröffentlicht 17.06.2012 03:41:40
- Zuletzt bearbeitet 16.06.2026 23:41:31
- Erkennungen
LoginPyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.39% | 0.824 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081713.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081759.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081789.html
http://secunia.com/advisories/49263
http://www.debian.org/security/2012/dsa-2502
http://www.mandriva.com/security/advisories?name=MDVSA-2012:117
http://www.openwall.com/lists/oss-security/2012/05/25/1
http://www.osvdb.org/82279
http://www.securityfocus.com/bid/53687
https://bugs.launchpad.net/pycrypto/+bug/985164
https://exchange.xforce.ibmcloud.com/vulnerabilities/75871
https://github.com/Legrandin/pycrypto/commit/9f912f13df99ad3421eff360d6a62d7dbec755c2
https://github.com/dlitz/pycrypto/blob/373ea760f21701b162e8c4912a66928ee30d401a/ChangeLog
https://hermes.opensuse.org/messages/15083589