Search for packages
| purl | pkg:deb/debian/python-crypto@2.0%2Bdp1-2 |
| Next non-vulnerable version | 2.6-4+deb7u3 |
| Latest non-vulnerable version | 2.6-4+deb7u3 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-mrec-hnpq-jqdn
Aliases: CVE-2013-1445 GHSA-x377-f64p-hf5j PYSEC-2013-29 |
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a child process is created and accesses the PRNG within the same rate-limit period as another process. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-15T13:11:23.252430+00:00 | Debian Oval Importer | Affected by | VCID-mrec-hnpq-jqdn | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 38.4.0 |
| 2026-04-11T13:00:07.284520+00:00 | Debian Oval Importer | Affected by | VCID-mrec-hnpq-jqdn | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 38.3.0 |
| 2026-04-07T21:35:02.787829+00:00 | Debian Oval Importer | Affected by | VCID-mrec-hnpq-jqdn | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 38.1.0 |