{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"pycrypto","cve_ids":["CVE-2013-7459"],"ecosystem":"PyPI","epss":0.09578,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cq27-v7xp-c356","id":"tcs_01M5KG7KX947PY5S2N6YHEE5K3","modified_at":"2023-11-08T03:57:29.606861Z","published_at":"2017-02-15T15:59:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-94","https://pony7.fr/ctf:public:32c3:cryptmsg","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJ37R2YLX56YZABFNAOWV4VTHTGYREAE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C6BWNADPLKDBBQBUT3P75W7HAJCE7M3B/","https://github.com/dlitz/pycrypto/issues/176","https://github.com/dlitz/pycrypto/commit/8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4","https://bugzilla.redhat.com/show_bug.cgi?id=1409754","http://www.securityfocus.com/bid/95122","http://www.openwall.com/lists/oss-security/2016/12/27/8","https://security.gentoo.org/glsa/201702-14","https://github.com/advisories/GHSA-cq27-v7xp-c356"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2017-94","url":"https://osv.dev/vulnerability/PYSEC-2017-94"}],"summary":"Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv pa"}