VDB
GCVE-110-MAGEIA-2017-32
GCVE-110-MAGEIA-2017-32
Advisory Published
This is a security fix for a possible Buffer overflow.
AES.new with invalid parameter crashes python.
The IV parameter is currently ignored when initializing a cipher in ECB
or CTR mode.
There was a bug in pycrypto which could be exploited to get a shell.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-pycrypto | 0 (affected), 2.6.1-6.1.mga5 (unaffected), 0 (affected), 2.6.1-6.1.mga5 (unaffected) | — |
| Mageia | mageiawelcome | 1.13-1.mga6 (unaffected), 0 (affected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.