Skip to content

Integer overflow vulnerability in pycryptodome module #198

@byck01

Description

@byck01

1.Install pycryptodome module in python

2.Run the following poc
python poc.py

from Crypto.Cipher import AES
data = 'hello'
key = b'this is a 16 key'
aes = AES.new(key,AES.MODE_ECB)
aes.encrypt(data.encode())

3.python will crash(Segmentation fault)

4.Specific vulnerability analysis reference:
https://whitehatck01.blogspot.com/2018/08/integer-overflow-vulnerability-in.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions