CVE-2013-7459: Buffer Overflow
A heap-buffer overflow vulnerability was discovered in cryptopp. This vulnerability can be used to remotely gain access to shell.
References:
http://seclists.org/oss-sec/2016/q4/760 https://pony7.fr/ctf:public:32c3:cryptmsg
Upstream bug:
https://github.com/dlitz/pycrypto/issues/176
Other sources
Heap-based buffer overflow in the ALGnew function in blocktemplace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.
— GitHub
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7459?
CVE-2013-7459 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2013-7459?
To fix CVE-2013-7459, update the affected software to a version that is not vulnerable, such as upgrading pycrypto to a version later than 2.6.1.
What software is affected by CVE-2013-7459?
CVE-2013-7459 affects pycrypto versions up to and including 2.6.1, as well as Fedora versions 24 and 25.
What type of vulnerability is CVE-2013-7459?
CVE-2013-7459 is a heap-buffer overflow vulnerability that can lead to remote shell access.
Can CVE-2013-7459 be exploited remotely?
Yes, CVE-2013-7459 can be exploited remotely, potentially allowing attackers to gain unauthorized access.