Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-7750

Fixed in a distro release EPSS 27%

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

Published 2018-03-13 · CVE record · OSV

Products: paramiko, redhat ansible_engine, redhat cloudforms, redhat virtualization, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, debian_linux

Fixed upstream

EcosystemPackageFixed in
PyPIparamiko2.0.8
PyPIparamiko2.1.5
PyPIparamiko2.2.3
PyPIparamiko2.3.2
PyPIparamiko2.4.1
PyPIparamiko1.18.5
PyPIparamiko1.17.6
PyPIparamikofa29bd8446c8eab237f5187d28787727b4610516

Distro releases

ReleasePackageFixed in
Alpine 3.11py3-paramiko2.4.1-r0
Alpine 3.12py3-paramiko2.4.1-r0
Alpine 3.13py3-paramiko2.4.1-r0
Alpine 3.14py3-paramiko2.4.1-r0
Debian 12paramiko2.4.2-0.1
Debian 13paramiko2.4.2-0.1
Debian 14paramiko2.4.2-0.1
Debian 8paramiko1.15.1-1+deb8u1
Debian 9paramiko2.0.0-1+deb9u1
Red Hat ansible engine 2python-paramiko0:2.1.1-4.el7
Red Hat ansible engine 2.4python-paramiko0:2.1.1-4.el7
Red Hat cloudforms managementengine 5.8ansible0:2.4.4.0-1.el7ae
Red Hat cloudforms managementengine 5.8ansible-tower-server0:3.1.7-1.el7at
Red Hat cloudforms managementengine 5.8ansible-tower-setup0:3.1.7-1.el7at
Red Hat cloudforms managementengine 5.8cfme0:5.8.4.5-1.el7cf
Red Hat cloudforms managementengine 5.8cfme-appliance0:5.8.4.5-1.el7cf
Red Hat cloudforms managementengine 5.8cfme-appliance-debuginfo0:5.8.4.5-1.el7cf
Red Hat cloudforms managementengine 5.8cfme-debuginfo0:5.8.4.5-1.el7cf
Red Hat cloudforms managementengine 5.8cfme-gemset0:5.8.4.5-1.el7cf
Red Hat cloudforms managementengine 5.8python-paramiko0:2.1.1-4.el7
Red Hat cloudforms managementengine 5.8python-paramiko-doc0:2.1.1-4.el7
Red Hat cloudforms managementengine 5.8rh-ruby23-rubygem-json0:2.1.0-1.el7cf
Red Hat cloudforms managementengine 5.8rh-ruby23-rubygem-json-debuginfo0:2.1.0-1.el7cf
Red Hat cloudforms managementengine 5.8rh-ruby23-rubygem-json-doc0:2.1.0-1.el7cf
Red Hat cloudforms managementengine 5.9ansible0:2.4.4.0-1.el7ae
Red Hat cloudforms managementengine 5.9ansible-doc0:2.4.4.0-1.el7ae
Red Hat cloudforms managementengine 5.9ansible-tower0:3.2.4-1.el7at
Red Hat cloudforms managementengine 5.9ansible-tower-server0:3.2.4-1.el7at
Red Hat cloudforms managementengine 5.9ansible-tower-setup0:3.2.4-1.el7at
Red Hat cloudforms managementengine 5.9ansible-tower-ui0:3.2.4-1.el7at
Red Hat cloudforms managementengine 5.9ansible-tower-venv-ansible0:3.2.4-1.el7at
Red Hat cloudforms managementengine 5.9ansible-tower-venv-tower0:3.2.4-1.el7at
Red Hat cloudforms managementengine 5.9cfme0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-amazon-smartstate0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-appliance0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-appliance-common0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-appliance-debuginfo0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-appliance-tools0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-debuginfo0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-gemset0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9cfme-gemset-debuginfo0:5.9.2.4-1.el7cf
Red Hat cloudforms managementengine 5.9dbus-api-service0:1.0.1-3.el7cf
Red Hat cloudforms managementengine 5.9httpd-configmap-generator0:0.2.1-2.el7cf
Red Hat cloudforms managementengine 5.9postgresql960:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-contrib0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-debuginfo0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-devel0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-docs0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-libs0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-plperl0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-plpython0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-pltcl0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-server0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9postgresql96-test0:9.6.6-1PGDG.el7
Red Hat cloudforms managementengine 5.9python-paramiko0:2.1.1-4.el7
Red Hat cloudforms managementengine 5.9python-paramiko-doc0:2.1.1-4.el7
Red Hat cloudforms managementengine 5.9rh-ruby23-rubygem-json0:2.1.0-1.el7cf
Red Hat cloudforms managementengine 5.9rh-ruby23-rubygem-json-debuginfo0:2.1.0-1.el7cf
Red Hat cloudforms managementengine 5.9rh-ruby23-rubygem-json-doc0:2.1.0-1.el7cf
Red Hat cloudforms managementengine 5.9rh-ruby23-rubygem-qpid_proton0:0.22.0-2.el7cf
Red Hat cloudforms managementengine 5.9rh-ruby23-rubygem-qpid_proton-debuginfo0:0.22.0-2.el7cf
Red Hat cloudforms managementengine 5.9rh-ruby23-rubygem-qpid_proton-doc0:0.22.0-2.el7cf
Red Hat Enterprise Linux 6python-paramiko0:1.7.5-4.el6_9
Red Hat Enterprise Linux 7python-paramiko0:2.1.1-4.el7
Red Hat Enterprise Linux 7python-paramiko-doc0:2.1.1-4.el7
Red Hat Enterprise Linux 7rhvm-appliance2:4.2-20180504.0.el7
Red Hat rhel aus 6.4python-paramiko0:1.7.5-4.el6_4
Red Hat rhel aus 6.5python-paramiko0:1.7.5-4.el6_5
Red Hat rhel aus 6.6python-paramiko0:1.7.5-4.el6_6
Red Hat rhel eus 6.7python-paramiko0:1.7.5-4.el6_7
Red Hat rhel extras other 7python-paramiko0:2.1.1-4.el7
Red Hat rhel extras other 7python-paramiko-doc0:2.1.1-4.el7
Red Hat rhel tus 6.6python-paramiko0:1.7.5-4.el6_6
Red Hat rhev manager 4python-paramiko0:2.1.1-4.el7
Red Hat rhev manager 4python-paramiko-doc0:2.1.1-4.el7
SUSE Enterprise Storage 3python-paramiko1.15.2-2.6.1
SUSE Enterprise Storage 4python-paramiko2.0.8-3.3.1
SUSE Enterprise Storage 5python-paramiko2.0.8-3.3.1
SUSE Linux Enterprise Module for Public Cloud 12python-paramiko1.15.2-2.9.1
SUSE Linux Enterprise Module for Public Cloud 12python-paramiko1.18.5-2.12.1
SUSE OpenStack Cloud 6python-paramiko1.15.2-2.6.1
SUSE OpenStack Cloud 7python-paramiko2.0.8-3.3.1
Ubuntu 14.04 LTSparamiko1.10.1-1git1ubuntu0.1
Ubuntu 16.04 LTSparamiko1.16.0-1ubuntu0.1
openSUSE Tumbleweedpython-paramiko2.7.2-3.7
openSUSE Tumbleweedpython-paramiko5.0.0-1.1