Published: 15/02/2017 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote malicious users to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dlitz pycrypto
fedoraproject fedora 25
fedoraproject fedora 24

Debian Bug report logs - #849495 python-crypto: CVE-2013-7459 Package: src:python-crypto; Maintainer for src:python-crypto is Sebastian Ramacher <sramacher@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Dec 2016 21:51:02 UTC Severity: grave Tags: patch, security, upstream Found in v ...

USN-3199-1 introduced a regression in the Python Cryptography Toolkit which caused programs which relied on the original behavior to fail ...

Programs using the Python Cryptography Toolkit could be made to crash or run programs if they receive specially crafted network traffic or other input ...

A heap-buffer overflow vulnerability was discovered in cryptopp This vulnerability can be used to remotely gain access to shell ...

CWE-119 https://pony7.fr/ctf:public:32c3:cryptmsg https://github.com/dlitz/pycrypto/issues/176 https://github.com/dlitz/pycrypto/commit/8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4 https://bugzilla.redhat.com/show_bug.cgi?id=1409754 http://www.securityfocus.com/bid/95122 http://www.openwall.com/lists/oss-security/2016/12/27/8 https://security.gentoo.org/glsa/201702-14 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJ37R2YLX56YZABFNAOWV4VTHTGYREAE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C6BWNADPLKDBBQBUT3P75W7HAJCE7M3B/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=849495 https://nvd.nist.gov https://usn.ubuntu.com/3199-2/

CVE-2013-7459

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect