Approved changes feed: RSS · Atom

cpe:2.3:a:pycryptodome:pycryptodome:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPycryptodome (8fe9fa2b-eaf9-529a-8aaf-2f281e3cc96f)
ProductPycryptodome (1b462135-7a71-56f6-b1c8-12b59365c1a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-pycryptodome purl2cpe 2026-06-01 10:18:03.028055
pkg:deb/ubuntu/python-pycryptodome purl2cpe 2026-06-01 10:18:03.028059
pkg:github/legrandin/pycryptodome purl2cpe 2026-06-01 10:18:03.028062
pkg:pypi/pycryptodome purl2cpe 2026-06-01 10:18:03.028064
pkg:rpm/fedora/python-pycryptodome purl2cpe 2026-06-01 10:18:03.028068
pkg:rpm/opensuse/python-pycryptodome purl2cpe 2026-06-01 10:18:03.028071

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-15560 vulnerable 2026-06-08 05:10:55.092321 Details available
PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the mishandling of messages shorter than 16 bytes.
Published: 2018-08-20T00:00:00.000Z
Updated: 2024-08-05T09:54:03.532Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.