PyPI/pycrypto CVE-2013-1445: high 7.5, EPSS 1.75%

PyCrypto does not properly reseed PRNG before allowing access

Action: Upgrade pycrypto to 2.6.1 or later.

pip install pycrypto==2.6.1

Affected

Fixed versions

Sources

• osv: GHSA-x377-f64p-hf5j
• https://nvd.nist.gov/vuln/detail/CVE-2013-1445
• https://github.com/dlitz/pycrypto/commit/19dcf7b15d61b7dc1a125a367151de40df6ef175
• https://github.com/pycrypto/pycrypto
• https://github.com/pypa/advisory-database/tree/main/vulns/pycrypto/PYSEC-2013-29.yaml
• http://www.debian.org/security/2013/dsa-2781
• http://www.openwall.com/lists/oss-security/2013/10/17/3

CVE-2013-1445 · published 2022-05-17T04:59:18Z · modified 2024-10-21T20:52:56.000321Z · JSON