Skip to content
OpenAdvisories
Critical RHSA-2018:1124 1 CVE

Red Hat Security Advisory: python-paramiko security update

Published Sep 18, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client python-paramiko 0:1.7.5-4.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode python-paramiko 0:1.7.5-4.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server python-paramiko 0:1.7.5-4.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation python-paramiko 0:1.7.5-4.el6_9

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-7750 Public exploit EPSS 27%

    Paramiko not properly checking authentication before processing other requests

    transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed b…

    paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557130
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1124.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-7750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7750
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7750