Python Software Foundation paramiko vulnerabilities

Latest Python Software Foundation paramiko CVEs

Newest publication first

1. CVE-2008-0299 Paramiko Unsafe randomness usage may allow access to sensitive information

   Published 2008-01-16

   Medium·CVSS 4.3

   common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.