CVE-2018-7750 Paramiko not properly checking authentication before processing other requests
CriticalCVSS 9.8
EPSS 27.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi paramiko(PyPI) | >= 2.0.0, < 2.0.8 | 2.0.8 |
| pypi paramiko(PyPI) | = 2.0.0 | No fix listed |
| pypi paramiko(PyPI) | = 2.0.1 | No fix listed |
| pypi paramiko(PyPI) | = 2.0.2 | No fix listed |
| pypi paramiko(PyPI) | = 2.0.3 | No fix listed |
| pypi paramiko(PyPI) | = 2.0.4 | No fix listed |
| pypi paramiko(PyPI) | = 2.0.5 | No fix listed |
| pypi paramiko(PyPI) | = 2.0.6 | No fix listed |
| pypi paramiko(PyPI) | = 2.0.7 | No fix listed |
| pypi paramiko(PyPI) | >= 2.1.0, < 2.1.5 | 2.1.5 |
| pypi paramiko(PyPI) | = 2.1.0 | No fix listed |
| pypi paramiko(PyPI) | = 2.1.1 | No fix listed |
| pypi paramiko(PyPI) | = 2.1.2 | No fix listed |
| pypi paramiko(PyPI) | = 2.1.3 | No fix listed |
| pypi paramiko(PyPI) | = 2.1.4 | No fix listed |
| pypi paramiko(PyPI) | >= 2.2.0, < 2.2.3 | 2.2.3 |
| pypi paramiko(PyPI) | = 2.2.0 | No fix listed |
| pypi paramiko(PyPI) | = 2.2.1 | No fix listed |
| pypi paramiko(PyPI) | = 2.2.2 | No fix listed |
| pypi paramiko(PyPI) | >= 2.3.0, < 2.3.2 | 2.3.2 |
| pypi paramiko(PyPI) | = 2.3.0 | No fix listed |
| pypi paramiko(PyPI) | = 2.3.1 | No fix listed |
| pypi paramiko(PyPI) | >= 2.4.0, < 2.4.1 | 2.4.1 |
| pypi paramiko(PyPI) | = 2.4.0 | No fix listed |
| pypi paramiko(PyPI) | >= 1.18.0, < 1.18.5 | 1.18.5 |
Show 133 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi paramiko(PyPI) | = 1.18.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.18.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.18.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.18.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.18.4 | No fix listed |
| pypi paramiko(PyPI) | < 1.17.6 | 1.17.6 |
| pypi paramiko(PyPI) | = 0.1-bulbasaur | No fix listed |
| pypi paramiko(PyPI) | = 0.1-charmander | No fix listed |
| pypi paramiko(PyPI) | = 0.9-doduo | No fix listed |
| pypi paramiko(PyPI) | = 0.9-eevee | No fix listed |
| pypi paramiko(PyPI) | = 0.9-fearow | No fix listed |
| pypi paramiko(PyPI) | = 0.9-gyarados | No fix listed |
| pypi paramiko(PyPI) | = 0.9-horsea | No fix listed |
| pypi paramiko(PyPI) | = 0.9-ivysaur | No fix listed |
| pypi paramiko(PyPI) | = 1.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.5 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.6 | No fix listed |
| pypi paramiko(PyPI) | = 1.10.7 | No fix listed |
| pypi paramiko(PyPI) | = 1.11.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.11.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.11.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.11.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.11.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.11.5 | No fix listed |
| pypi paramiko(PyPI) | = 1.11.6 | No fix listed |
| pypi paramiko(PyPI) | = 1.12.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.12.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.12.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.12.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.12.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.13.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.13.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.13.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.13.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.13.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.14.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.14.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.14.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.14.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.15.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.15.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.15.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.15.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.15.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.15.5 | No fix listed |
| pypi paramiko(PyPI) | = 1.16.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.16.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.16.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.16.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.17.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.17.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.17.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.17.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.17.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.17.5 | No fix listed |
| pypi paramiko(PyPI) | = 1.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.3.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.5.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.5.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.5.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.6 | No fix listed |
| pypi paramiko(PyPI) | = 1.6.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.6.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.6.3 | No fix listed |
| pypi paramiko(PyPI) | = 1.6.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.7 | No fix listed |
| pypi paramiko(PyPI) | = 1.7.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.7.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.7.4 | No fix listed |
| pypi paramiko(PyPI) | = 1.7.5 | No fix listed |
| pypi paramiko(PyPI) | = 1.7.6 | No fix listed |
| pypi paramiko(PyPI) | = 1.7.7.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.7.7.2 | No fix listed |
| pypi paramiko(PyPI) | = 1.8.0 | No fix listed |
| pypi paramiko(PyPI) | = 1.8.1 | No fix listed |
| pypi paramiko(PyPI) | = 1.9.0 | No fix listed |
| pypi paramiko(PyPI) | = v1.12.0 | No fix listed |
| pypi paramiko(PyPI) | = v1.11.0 | No fix listed |
| pypi paramiko(PyPI) | = v1.8.0 | No fix listed |
| pypi paramiko(PyPI) | = initial-merge-from-ssh-done | No fix listed |
| pypi paramiko(PyPI) | = v1.7.7.2 | No fix listed |
| pypi paramiko(PyPI) | = v1.7.7.1 | No fix listed |
| pypi paramiko(PyPI) | = release-1.7.6 | No fix listed |
| pypi paramiko(PyPI) | = release-1.7.5 | No fix listed |
| pypi paramiko(PyPI) | = release-1.7.4 | No fix listed |
| debian/paramiko(Debian:12) | < 2.4.2-0.1 | 2.4.2-0.1 |
| debian/paramiko(Debian:13) | < 2.4.2-0.1 | 2.4.2-0.1 |
| debian/paramiko(Debian:14) | < 2.4.2-0.1 | 2.4.2-0.1 |
| paramiko | < 1.17.6 | 1.17.6 |
| paramiko | >= 1.18.0, < 1.18.5 | 1.18.5 |
| paramiko | >= 2.0.0, < 2.0.8 | 2.0.8 |
| paramiko | >= 2.1.0, < 2.1.5 | 2.1.5 |
| paramiko | >= 2.2.0, < 2.2.3 | 2.2.3 |
| paramiko | >= 2.3.0, < 2.3.2 | 2.3.2 |
| paramiko | = 2.4.0 | No fix listed |
| redhat ansible engine | = 2.0 | No fix listed |
| redhat ansible engine | = 2.4 | No fix listed |
| redhat cloudforms | = 4.5 | No fix listed |
| redhat cloudforms | = 4.6 | No fix listed |
| redhat virtualization | = 4.1 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 6.4 | No fix listed |
| redhat enterprise linux server aus | = 6.5 | No fix listed |
| redhat enterprise linux server aus | = 6.6 | No fix listed |
| redhat enterprise linux server eus | = 6.7 | No fix listed |
| redhat enterprise linux server tus | = 6.6 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| alpine/py3-paramiko(Alpine:v3.11) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.12) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.13) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.14) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.15) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.16) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.17) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.18) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.19) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.20) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.21) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.22) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.23) | < 2.4.1-r0 | 2.4.1-r0 |
| alpine/py3-paramiko(Alpine:v3.24) | < 2.4.1-r0 | 2.4.1-r0 |
References
- Debian Security Tracker CVE-2018-7750 vendor-advisory
- bugs.debian.org issue-tracking
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking third-party-advisory
- github.com patch third-party-advisory
- github.com patch
- 45712 exploit third-party-advisory vdb-entry
- web.archive.org
- USN-3603-2 third-party-advisory vendor-advisory
- USN-3603-1 third-party-advisory vendor-advisory
- [debian-lts-announce] 20211228 [SECURITY] [DLA 2860-1] paramiko security update mailing-list third-party-advisory
- [debian-lts-announce] 20181027 [SECURITY] [DLA 1556-1] paramiko security update mailing-list third-party-advisory
- github.com
- github.com third-party-advisory
- github.com
- github.com product
- github.com vendor-advisory
- RHSA-2018:1972 third-party-advisory vendor-advisory
- RHSA-2018:1525 third-party-advisory vendor-advisory
- RHSA-2018:1328 third-party-advisory vendor-advisory
- RHSA-2018:1274 third-party-advisory vendor-advisory
- RHSA-2018:1213 third-party-advisory vendor-advisory
- RHSA-2018:1125 third-party-advisory vendor-advisory
- RHSA-2018:1124 third-party-advisory vendor-advisory
- RHSA-2018:0646 third-party-advisory vendor-advisory
- RHSA-2018:0591 third-party-advisory vendor-advisory
- 103713 third-party-advisory vdb-entry
- security.alpinelinux.org vendor-advisory