PT-2017-5761
CVE-2013-7459
·
Publicado
2017-01-16
·
Atualizado
2026-01-17
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Python Cryptography Toolkit (aka pycrypto) (affected versions not specified)
Description:
The issue is related to a heap-based buffer overflow in the ALGnew function in block templace.c. This can be exploited by remote attackers to execute arbitrary code, for example, by using a crafted
iv parameter.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾