Skip to content
OpenAdvisories
Critical RHSA-2018:1125 1 CVE

Red Hat Security Advisory: python-paramiko security update

Published Sep 18, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server python-paramiko 0:1.7.5-4.el6_4
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server python-paramiko 0:1.7.5-4.el6_5
Red Hat · RHEL 6.6 AUS rhel_aus:6.6::server python-paramiko 0:1.7.5-4.el6_6
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::computenode python-paramiko 0:1.7.5-4.el6_7
Red Hat · RHEL 6.7 EUS rhel_eus:6.7::server python-paramiko 0:1.7.5-4.el6_7
Red Hat · RHEL 6.6 TUS rhel_tus:6.6::server python-paramiko 0:1.7.5-4.el6_6

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-7750 Public exploit EPSS 27%

    Paramiko not properly checking authentication before processing other requests

    transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed b…

    paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557130
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1125.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-7750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7750
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7750