[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2013-243 ---- python-crypto

ID: oval:org.secpod.oval:def:1600275Date: (C)2016-05-19   (M)2022-10-10
Class: PATCHFamily: unix




The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process.

Platform:
Amazon Linux AMI
Product:
python-crypto
Reference:
ALAS-2013-243
CVE-2013-1445
CVE    1
CVE-2013-1445
CPE    2
cpe:/o:amazon:linux
cpe:/a:python:python-crypto

© SecPod Technologies