4.3

CVE-2012-2417

Exploit

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

Data is provided by the National Vulnerability Database (NVD)
Dlitz ≫ Pycrypto Version <= 2.5
Dlitz ≫ Pycrypto Version1.0.0
Dlitz ≫ Pycrypto Version1.0.1
Dlitz ≫ Pycrypto Version1.0.2
Dlitz ≫ Pycrypto Version1.1 Updatealpha2
Dlitz ≫ Pycrypto Version1.9 Updatealpha1
Dlitz ≫ Pycrypto Version1.9 Updatealpha2
Dlitz ≫ Pycrypto Version1.9 Updatealpha3
Dlitz ≫ Pycrypto Version1.9 Updatealpha4
Dlitz ≫ Pycrypto Version1.9 Updatealpha5
Dlitz ≫ Pycrypto Version1.9 Updatealpha6
Dlitz ≫ Pycrypto Version2.0
Dlitz ≫ Pycrypto Version2.0.1
Dlitz ≫ Pycrypto Version2.1.0
Dlitz ≫ Pycrypto Version2.1.0 Updatealpha1
Dlitz ≫ Pycrypto Version2.1.0 Updatealpha2
Dlitz ≫ Pycrypto Version2.1.0 Updatebeta1
Dlitz ≫ Pycrypto Version2.2
Dlitz ≫ Pycrypto Version2.3
Dlitz ≫ Pycrypto Version2.4
Dlitz ≫ Pycrypto Version2.4.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.09% 0.875
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N