{"action":"Upgrade paramiko to 1.7.1-3 or later.","affected":[{"fixed":"1.7.1-3","introduced":"0"}],"component":"paramiko","cve_ids":["CVE-2008-0299"],"ecosystem":"PyPI","epss":0.0162,"exploited":false,"fixed_versions":["1.7.1-3"],"ghsa_id":"GHSA-wqmm-q65g-2hqr","id":"tcs_01M5KG2RW8WMYWNCNANAMK961Z","modified_at":"2024-10-08T13:23:18.317479Z","published_at":"2022-05-01T23:28:57Z","references":["https://osv.dev/vulnerability/GHSA-wqmm-q65g-2hqr","https://nvd.nist.gov/vuln/detail/CVE-2008-0299","https://bugzilla.redhat.com/show_bug.cgi?id=428727","https://exchange.xforce.ibmcloud.com/vulnerabilities/39749","https://github.com/paramiko/paramiko","https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2008-8.yaml","https://web.archive.org/web/20080205095439/http://secunia.com/advisories/28488","https://web.archive.org/web/20080627172450/http://secunia.com/advisories/28510","https://web.archive.org/web/20080628232710/http://secunia.com/advisories/29168","https://web.archive.org/web/20080720033315/http://www.lag.net/pipermail/paramiko/2008-January/000599.html","https://web.archive.org/web/20081012023428/http://www.securityfocus.com/bid/27307","https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00529.html","https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00594.html","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706","http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch","http://security.gentoo.org/glsa/glsa-200803-07.xml"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-wqmm-q65g-2hqr","url":"https://osv.dev/vulnerability/GHSA-wqmm-q65g-2hqr"}],"summary":"Paramiko Unsafe randomness usage may allow access to sensitive information"}