Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-1000805

Fixed in a distro release EPSS 4%

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

Published 2018-10-08 · CVE record · OSV

Products: paramiko, redhat ansible_tower, redhat virtualization_host, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, debian_linux, canonical ubuntu_linux

Fixed upstream

EcosystemPackageFixed in
PyPIparamiko2.4.2
PyPIparamiko2.3.3
PyPIparamiko2.2.4
PyPIparamiko2.1.6
PyPIparamiko2.0.9

Distro releases

ReleasePackageFixed in
Alpine 3.11py3-paramiko2.4.2-r0
Alpine 3.12py3-paramiko2.4.2-r0
Alpine 3.13py3-paramiko2.4.2-r0
Alpine 3.14py3-paramiko2.4.2-r0
Alpine 3.6py-paramiko2.1.6-r0
Alpine 3.7py-paramiko2.4.2-r0
Alpine 3.8py-paramiko2.4.2-r0
Debian 12paramiko2.4.2-0.1
Debian 13paramiko2.4.2-0.1
Debian 14paramiko2.4.2-0.1
Debian 8paramiko1.15.1-1+deb8u1
Debian 9paramiko2.0.0-1+deb9u1
Red Hat Enterprise Linux 6python-paramiko0:1.7.5-5.el6_10
Red Hat Enterprise Linux 7imgbased0:1.0.29-1.el7ev
Red Hat Enterprise Linux 7python-imgbased0:1.0.29-1.el7ev
Red Hat Enterprise Linux 7python-paramiko0:2.1.1-9.el7
Red Hat Enterprise Linux 7python-paramiko-doc0:2.1.1-9.el7
Red Hat Enterprise Linux 7redhat-release-virtualization-host0:4.2-7.3.el7
Red Hat Enterprise Linux 7redhat-virtualization-host0:4.2-20181026.0.el7_6
Red Hat Enterprise Linux 7redhat-virtualization-host-image-update0:4.2-20181026.0.el7_6
Red Hat Enterprise Linux 7redhat-virtualization-host-image-update-placeholder0:4.2-7.3.el7
Red Hat Enterprise Linux 7rhvm-appliance2:4.2-20181026.1.el7
Red Hat rhel aus 6.4python-paramiko0:1.7.5-4.el6_4.1
Red Hat rhel aus 6.5python-paramiko0:1.7.5-4.el6_5.1
Red Hat rhel aus 6.6python-paramiko0:1.7.5-4.el6_6.1
Red Hat rhel eus 6.7python-paramiko0:1.7.5-4.el6_7.1
Red Hat rhel tus 6.6python-paramiko0:1.7.5-4.el6_6.1
SUSE Enterprise Storage 4python-paramiko2.0.9-3.6.1
SUSE Enterprise Storage 5python-paramiko2.0.9-3.6.1
SUSE Enterprise Storage 6python-paramiko2.4.3-150100.6.15.1
SUSE Enterprise Storage 7python-paramiko2.4.3-150100.6.15.1
SUSE HPE Helion OpenStack 8python-paramiko2.2.4-4.3.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Module for Basesystem 15python-paramiko2.4.2-3.3.2
SUSE Linux Enterprise Module for Basesystem 15 SP3python-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP4python-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Module for Public Cloud 12python-paramiko2.1.3-9.6.1
SUSE Linux Enterprise Module for Public Cloud 15python-paramiko2.4.2-3.3.2
SUSE Linux Enterprise Module for Python 2 15 SP3python-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Server 15 SP1-BCLpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Server 15 SP1-LTSSpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Server 15 SP2-BCLpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Server 15 SP2-LTSSpython-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-paramiko2.4.3-150100.6.15.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-paramiko2.4.3-150100.6.15.1
SUSE Manager Proxy 4.1python-paramiko2.4.3-150100.6.15.1
SUSE Manager Retail Branch Server 4.1python-paramiko2.4.3-150100.6.15.1
SUSE Manager Server 4.1python-paramiko2.4.3-150100.6.15.1
SUSE OpenStack Cloud 7python-amqp1.4.9-3.3.1
SUSE OpenStack Cloud 7python-oslo.messaging5.10.2-3.9.1
SUSE OpenStack Cloud 7python-ovs2.5.0-3.3.1
SUSE OpenStack Cloud 7python-paramiko2.0.9-3.6.1
SUSE OpenStack Cloud 7python-psql2mysql0.5.0+git.1539592188.13e5d0f-1.9.1
SUSE OpenStack Cloud 8python-paramiko2.2.4-4.3.1
SUSE OpenStack Cloud Crowbar 8python-paramiko2.2.4-4.3.1
Ubuntu 14.04 LTSparamiko1.10.1-1git1ubuntu0.2
Ubuntu 16.04 LTSparamiko1.16.0-1ubuntu0.2
Ubuntu 18.04 LTSparamiko2.0.0-1ubuntu1.1
openSUSE Leap 15.3python-paramiko2.4.3-150100.6.15.1
openSUSE Leap 15.4python-paramiko2.4.3-150100.6.15.1
openSUSE Tumbleweedpython-paramiko5.0.0-1.1
openSUSE Tumbleweedpython-paramiko2.7.2-3.7