lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCrypto's ElGamal implementation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python2-cryptoUpgrade python-crypto-debuginfo | Mar 10, 2025 | Feb 3, 2018 |
| Amazon_linux | — | Upgrade python-crypto | Mar 25, 2018 | Feb 3, 2018 |
| Amazon_linux_2023 | — | Upgrade python3-crypto-debuginfoUpgrade python3-cryptoUpgrade python-crypto-debugsource | Jul 11, 2025 | Feb 3, 2018 |
| Debian | — | Upgrade pycryptodome | Jul 30, 2024 | Feb 3, 2018 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jul 2, 2024 |
| Dell Powerstore Dsa2024336 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Aug 1, 2024 |
| Gentoo Linux | — | Upgrade dev-python/pycrypto. | Aug 4, 2020 | Feb 3, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-crypto | Feb 22, 2021 | Feb 3, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-crypto | Apr 30, 2021 | Feb 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-crypto | Dec 16, 2020 | Feb 3, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 3, 2018 |
| Ubuntu | — | Upgrade python-cryptoUpgrade python3-crypto | Apr 25, 2018 | Feb 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub