CVE-2022-24302
Fixed in a distro release EPSS 2%
In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
Products: paramiko, debian_linux, fedoraproject fedora
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | paramiko | 2.10.1 |
| PyPI | paramiko | 2.9.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | paramiko | 2.4.2-0.1+deb10u1 |
| Debian 11 | paramiko | 2.7.2-1+deb11u1 |
| Debian 12 | paramiko | 2.10.3-1 |
| Debian 13 | paramiko | 2.10.3-1 |
| Debian 14 | paramiko | 2.10.3-1 |
| Debian 9 | paramiko | 2.0.0-1+deb9u2 |
| Red Hat openstack 16.1 | python-paramiko | 0:2.4.2-8.el8ost |
| Red Hat openstack 16.1 | python3-paramiko | 0:2.4.2-8.el8ost |
| Red Hat openstack 16.2 | python-paramiko | 0:2.4.2-8.el8ost |
| Red Hat openstack 16.2 | python3-paramiko | 0:2.4.2-8.el8ost |
| Red Hat rhev hypervisor 4.4 | python-paramiko | 0:2.4.3-3.el8ev |
| Red Hat rhev hypervisor 4.4 | python-paramiko-doc | 0:2.4.3-3.el8ev |
| Red Hat rhev hypervisor 4.4 | python3-paramiko | 0:2.4.3-3.el8ev |
| Red Hat rhev manager 4.4 el8 | python-paramiko | 0:2.4.3-3.el8ev |
| Red Hat rhev manager 4.4 el8 | python-paramiko-doc | 0:2.4.3-3.el8ev |
| Red Hat rhev manager 4.4 el8 | python3-paramiko | 0:2.4.3-3.el8ev |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | python-paramiko | 2.4.2-150100.6.12.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-paramiko | 2.4.0-9.13.1 |
| SUSE Linux Enterprise Module for Python 2 15 SP3 | python-paramiko | 2.4.2-150100.6.12.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | python-paramiko | 2.4.2-150100.6.12.1 |
| Ubuntu 14.04 LTS | paramiko | no fix |
| Ubuntu 18.04 LTS | paramiko | 2.0.0-1ubuntu1.3 |
| Ubuntu 20.04 LTS | paramiko | 2.6.0-2ubuntu0.1 |
| Ubuntu 22.04 LTS | paramiko | 2.8.1-1ubuntu3 |
| Ubuntu Pro 16.04 LTS | paramiko | 1.16.0-1ubuntu0.2+esm2 |
| openSUSE Leap 15.3 | python-paramiko | 2.4.2-150100.6.12.1 |
| openSUSE Leap 15.4 | python-paramiko | 2.4.2-150100.6.12.1 |
| openSUSE Tumbleweed | python-paramiko | 5.0.0-1.2 |
| openSUSE Tumbleweed | python-paramiko | 3.3.1-2.1 |