CVE-2018-6594

lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCrypto's ElGamal implementation.

• CWE-326

• https://github.com/TElgamal/attack-on-pycrypto-elgamalThird Party Advisory
• https://github.com/dlitz/pycrypto/issues/253Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/02/msg00018.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-62
• https://usn.ubuntu.com/3616-1/Third Party Advisory
• https://usn.ubuntu.com/3616-2/Third Party Advisory
• https://github.com/TElgamal/attack-on-pycrypto-elgamalThird Party Advisory
• https://github.com/dlitz/pycrypto/issues/253Exploit, Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/02/msg00018.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-62
• https://usn.ubuntu.com/3616-1/Third Party Advisory
• https://usn.ubuntu.com/3616-2/Third Party Advisory

Published

Feb 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6588CA API Developer Portal 3.5 up to and including 3.5 CR5 has …6.1
• CVE-2018-6589CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x p…7.5
• CVE-2018-6590CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1,…6.1
• CVE-2018-6591Converse.js and Inverse.js through 3.3 allow remote attacker…
• CVE-2018-6592Unisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow …
• CVE-2018-6593An issue was discovered in MalwareFox AntiMalware 2.74.0.150…
• CVE-2018-6596webhooks/base.py in Anymail (aka django-anymail) before 1.2.…
• CVE-2018-6597The Alcatel A30 device with a build fingerprint of TCL/5046G…
• CVE-2018-6598An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:…
• CVE-2018-6599An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:…
• CVE-2018-6603Promise Technology WebPam Pro-E devices allow remote attacke…
• CVE-2018-6604SQL Injection exists in the Zh YandexMap 6.2.1.0 component f…