PyPI/pycrypto CVE-2013-1445: unknown, EPSS 1.75%

The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for co

Action: Upgrade pycrypto to 2.6.1 or later.

pip install pycrypto==2.6.1

Affected

Fixed versions

Sources

• osv: PYSEC-2013-29
• https://github.com/dlitz/pycrypto/commit/19dcf7b15d61b7dc1a125a367151de40df6ef175
• http://www.debian.org/security/2013/dsa-2781
• http://www.openwall.com/lists/oss-security/2013/10/17/3
• https://github.com/advisories/GHSA-x377-f64p-hf5j

CVE-2013-1445 · published 2013-10-26T17:55:00Z · modified 2026-06-10T17:02:30.616689024Z · JSON