tocsin

CVE-2018-7750

2 advisories.

PyPI/paramiko CVE-2018-7750: critical 9.8, EPSS 27.11%

Paramiko not properly checking authentication before processing other requests

Action: Upgrade paramiko to 1.17.6 or later.

pip install paramiko==2.0.8
pip install paramiko==2.1.5
pip install paramiko==2.2.3
pip install paramiko==2.3.2
pip install paramiko==2.4.1
pip install paramiko==1.18.5
pip install paramiko==1.17.6

Affected

introducedfixedlast affected
2.0.02.0.8-
2.1.02.1.5-
2.2.02.2.3-
2.3.02.3.2-
2.4.02.4.1-
1.18.01.18.5-
01.17.6-

Fixed versions

2.0.82.1.52.2.32.3.22.4.11.18.51.17.6

Sources

CVE-2018-7750 · published · modified · JSON

PyPI/paramiko CVE-2018-7750: unknown, EPSS 27.11%

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 do

Action: Upgrade paramiko to 1.17.6 or later.

pip install paramiko==1.17.6
pip install paramiko==1.18.5
pip install paramiko==2.0.8
pip install paramiko==2.1.5
pip install paramiko==2.2.3
pip install paramiko==2.3.2

Affected

introducedfixedlast affected
01.17.6-
1.18.01.18.5-
2.0.02.0.8-
2.1.02.1.5-
2.2.02.2.3-
2.3.02.3.2-

Fixed versions

1.17.61.18.52.0.82.1.52.2.32.3.2

Sources

CVE-2018-7750 · published · modified · JSON