Skip to content
OpenAdvisories
Critical RHSA-2018:0591 1 CVE

Red Hat Security Advisory: python-paramiko security and bug fix update

Published Sep 18, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 python-paramiko 0:2.1.1-4.el7
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 python-paramiko-doc 0:2.1.1-4.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-7750 Public exploit EPSS 27%

    Paramiko not properly checking authentication before processing other requests

    transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed b…

    paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557130
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1559133
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0591.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-7750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7750
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7750