Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-7749
7.5
HIGHCVSS v2
Published
March 12, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.
ronf/asyncssh
GitHubAsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework.
GitHubAsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework.< 1.12.1NVD