GCVE-VVD-MAGEIA-2017-32 — Vulnetix

Try Vulnetix Request Demo

GCVE-VVD-MAGEIA-2017-32

Advisory Published

Vulnetix · Advisory published July 25, 2017

This is a security fix for a possible Buffer overflow. AES.new with invalid parameter crashes python. The IV parameter is currently ignored when initializing a cipher in ECB or CTR mode. There was a bug in pycrypto which could be exploited to get a shell.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-pycrypto	0 (affected), 2.6.1-6.1.mga5 (unaffected), 0 (affected), 2.6.1-6.1.mga5 (unaffected)	—
Mageia	mageiawelcome	0 (affected), 1.13-1.mga6 (unaffected)	—

References

Updated python-pycrypto packages fix security vulnerabilities

advisory

Updated python-pycrypto packages fix security vulnerabilities

issue

Updated python-pycrypto packages fix security vulnerabilities

issue

Updated python-pycrypto packages fix security vulnerabilities

issue

Updated python-pycrypto packages fix security vulnerabilities

fix

Updated mageiawelcome package fixes and enhances functionalities

advisory

Updated mageiawelcome package fixes and enhances functionalities

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON