NetSight
IP …
medium4.3

CVE-2012-2417

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key …

Impact

PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.

Affected products

VendorProductAffected versions
DlitzPycrypto
through 2.5
Versions 1.0.0, 1.0.1, 1.0.2, 1.1, 1.9

Weakness classification

CWE-310

References