Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-7750
9.8
CRITICALCVSS v3
Published
March 13, 2018
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
paramiko/paramiko
GitHubThe leading native Python SSHv2 protocol library.
GitHubThe leading native Python SSHv2 protocol library.< 1.17.6, >= 1.18.0, < 1.18.5, >= 2.0.0, < 2.0.8, >= 2.1.0, < 2.1.5, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.2, = 2.4.0NVD
paramikoPython Package IndexSSH2 protocol library
Python Package IndexSSH2 protocol library< 1.17.6, >= 1.18.0, < 1.18.5, >= 2.0.0, < 2.0.8, >= 2.1.0, < 2.1.5, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.2, = 2.4.0NVD