lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCrypto's ElGamal implementation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python2-cryptoUpgrade python-crypto-debuginfo | Mar 10, 2025 | Feb 3, 2018 |
| Amazon_linux | — | Upgrade python-crypto | Mar 25, 2018 | Feb 3, 2018 |
| Amazon_linux_2023 | — | Upgrade python3-cryptoUpgrade python3-crypto-debuginfoUpgrade python-crypto-debugsource | Jul 11, 2025 | Feb 3, 2018 |
| Debian | — | Upgrade pycryptodome | Jul 30, 2024 | Feb 3, 2018 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jul 2, 2024 |
| Dell Powerstore Dsa2024336 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Aug 1, 2024 |
| Gentoo Linux | — | Upgrade dev-python/pycrypto. | Aug 4, 2020 | Feb 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-crypto | Feb 22, 2021 | Feb 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-crypto | Apr 30, 2021 | Feb 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-crypto | Dec 16, 2020 | Feb 3, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 3, 2018 |
| Ubuntu | — | Upgrade python3-cryptoUpgrade python-crypto | Apr 25, 2018 | Feb 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 3, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub