CVE catalog

CVE-2018-6594

pycryptodome: CVE-2018-6594

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
2.03% · Oct 25, 2026

lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCrypto's ElGamal implementation.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpycryptodomesid3.20.0+dfsg-3fixed
Debianpycryptodomeforky3.20.0+dfsg-3fixed
Debianpycryptodometrixie3.20.0+dfsg-3fixed
Debianpycryptodomebookworm3.11.0+dfsg1-4fixed
PyPIpycryptoNot reportedNot reportedunknown
PyPIpycryptoNot reportedNot reportedunknown
Ubuntupython-crypto14.042.6-5vulnerable
Ubuntupython-crypto14.042.6.1-2vulnerable
Ubuntupython-crypto14.042.6.1-2build1vulnerable
Ubuntupython-crypto14.042.6.1-3vulnerable
Ubuntupython-crypto14.042.6.1-4vulnerable
Ubuntupython-crypto14.042.6.1-4build1vulnerable
Ubuntupython-crypto14.042.6.1-4ubuntu0.1vulnerable
Ubuntupython-crypto14.042.6.1-4ubuntu0.2vulnerable
Ubuntupython-crypto14.042.6.1-4ubuntu0.3fixed
Ubuntupython-crypto16.042.6.1-5build1vulnerable
Ubuntupython-crypto16.042.6.1-6vulnerable
Ubuntupython-crypto16.042.6.1-6build1vulnerable
Ubuntupython-crypto16.042.6.1-6ubuntu0.16.04.1vulnerable
Ubuntupython-crypto16.042.6.1-6ubuntu0.16.04.2vulnerable
Ubuntupython-crypto16.042.6.1-6ubuntu0.16.04.3fixed
Ubuntupython-crypto14.042.6-5vulnerable
Ubuntupython-crypto14.042.6.1-2vulnerable
Ubuntupython-crypto14.042.6.1-2build1vulnerable
Ubuntupython-crypto14.042.6.1-3vulnerable
Ubuntupython-crypto14.042.6.1-4vulnerable
Ubuntupython-crypto14.042.6.1-4build1vulnerable
Ubuntupython-crypto14.042.6.1-4ubuntu0.1vulnerable
Ubuntupython-crypto14.042.6.1-4ubuntu0.2vulnerable
Ubuntupython-crypto14.042.6.1-4ubuntu0.3fixed
Ubuntupython-crypto16.042.6.1-5build1vulnerable
Ubuntupython-crypto16.042.6.1-6vulnerable
Ubuntupython-crypto16.042.6.1-6build1vulnerable
Ubuntupython-crypto16.042.6.1-6ubuntu0.16.04.1vulnerable
Ubuntupython-crypto16.042.6.1-6ubuntu0.16.04.2vulnerable
Ubuntupython-crypto16.042.6.1-6ubuntu0.16.04.3fixed
Ubuntupycryptodome18.043.4.6-1vulnerable
Ubuntupycryptodome18.043.4.7-1vulnerable
Ubuntupycryptodome18.043.4.7-1ubuntu1fixed
Ubuntupython-crypto18.042.6.1-7build2vulnerable
Ubuntupython-crypto18.042.6.1-8vulnerable
Ubuntupython-crypto18.042.6.1-8ubuntu2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpycryptodomesourcesid3.4.11-1not yet assignedNot reported[889998]
Debianpycryptodomesourceforky3.4.11-1not yet assignedNot reported[889998]
Debianpycryptodomesourcetrixie3.4.11-1not yet assignedNot reported[889998]
Debianpycryptodomesourcebookworm3.4.11-1not yet assignedNot reported[889998]
Ubuntupython-cryptodeb14.042.6.1-4ubuntu0.3Not reportedUSN-3616-1Not reported
Ubuntupython-cryptodeb16.042.6.1-6ubuntu0.16.04.3Not reportedUSN-3616-1Not reported
Ubuntupython-cryptodeb14.042.6.1-4ubuntu0.3Not reportedUBUNTU-CVE-2018-6594Not reported
Ubuntupython-cryptodeb16.042.6.1-6ubuntu0.16.04.3Not reportedUBUNTU-CVE-2018-6594Not reported
Ubuntupycryptodomedeb18.043.4.7-1ubuntu1Not reportedUBUNTU-CVE-2018-6594Not reported
Ubuntupython-cryptodeb18.042.6.1-8ubuntu2Not reportedUBUNTU-CVE-2018-6594Not reported

[Debian bug #889998]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [python3-pycryptodome]Fixed

    Source package: [pycryptodome]

    Details (2)

    • 3.11.0+dfsg1-4 · amd64 · bookworm

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · bookworm; dsa · pycryptodome · debian · 12

    • 3.11.0+dfsg1-4 · arm64 · bookworm

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · bookworm; dsa · pycryptodome · debian · 12

  • [python-pycryptodome-doc]Fixed

    Source package: [pycryptodome]

    Details (2)

    • 3.11.0+dfsg1-4 · all · bookworm

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · bookworm; dsa · pycryptodome · debian · 12

    • 3.11.0+dfsg1-4 · all · bookworm

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · bookworm; dsa · pycryptodome · debian · 12

[Debian 13 (Trixie)]

  • [python3-pycryptodome]Fixed

    Source package: [pycryptodome]

    Details (2)

    • 3.20.0+dfsg-3 · amd64 · trixie

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · 13

    • 3.20.0+dfsg-3 · arm64 · trixie

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · 13

  • [python-pycryptodome-doc]Fixed

    Source package: [pycryptodome]

    Details (2)

    • 3.20.0+dfsg-3 · all · trixie

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · 13

    • 3.20.0+dfsg-3 · all · trixie

      Fixed · Fixed: 3.4.11-1

      dsa · pycryptodome · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]