NVD

Id
44227  
Name
CVE-2012-2417  
Description
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-06-16  
Modified Date
2013-04-04  
Seq
2012-2417  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222117 44227 CVE-2012-2417 FEDORA-2012-8392  View
222118 44227 CVE-2012-2417 FEDORA-2012-8490  View
222119 44227 CVE-2012-2417 FEDORA-2012-8470  View
222120 44227 CVE-2012-2417 DSA-2502  View
222121 44227 CVE-2012-2417 MDVSA-2012:117  View
222122 44227 CVE-2012-2417 [oss-security] 20120524 CVE-2012-2417 - PyCrypto <= 2.5 insecure ElGamal key generation  View
222123 44227 CVE-2012-2417 53687  View
222124 44227 CVE-2012-2417 pycrypto-keys-weak-security(75871)  View
222125 44227 CVE-2012-2417 https://bugs.launchpad.net/pycrypto/+bug/985164  View
222126 44227 CVE-2012-2417 https://github.com/dlitz/pycrypto/blob/373ea760f21701b162e8c4912a66928ee30d401a/ChangeLog  View
222127 44227 CVE-2012-2417 https://github.com/Legrandin/pycrypto/commit/9f912f13df99ad3421eff360d6a62d7dbec755c2  View
222128 44227 CVE-2012-2417 openSUSE-SU-2012:0830  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27072 JVNDB-2012-002779 PyCrypto における秘密鍵を取得される脆弱性 PyCrypto は、鍵を生成するために ElGamal スキームを使用する際、適切な素数を生成しないため、秘密鍵を取得される脆弱性が存在します。 CVE-2012-2417 55655 CVE-2012-2417 44227 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002779.html 2012-04-18 2012-07-26 View