tocsin

CVE-2022-24302

2 advisories.

PyPI/paramiko CVE-2022-24302: medium 5.9, EPSS 2.08%

Race Condition in Paramiko

Action: Upgrade paramiko to 2.9.3 or later.

pip install paramiko==2.10.1
pip install paramiko==2.9.3

Affected

introducedfixedlast affected
2.10.02.10.1-
2.9.02.9.3-

Fixed versions

2.10.12.9.3

Sources

CVE-2022-24302 · published · modified · JSON

PyPI/paramiko CVE-2022-24302: unknown, EPSS 2.08%

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

Action: Upgrade paramiko to 2.9.3 or later.

pip install paramiko==2.9.3
pip install paramiko==2.10.1

Affected

introducedfixedlast affected
02.9.3-
2.10.02.10.1-

Fixed versions

2.9.32.10.1

Sources

CVE-2022-24302 · published · modified · JSON