Skip to content
OpenAdvisories
Critical RHSA-2018:1274 1 CVE

Red Hat Security Advisory: python-paramiko security, bug fix, and enhancement update

Published Sep 18, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor python-paramiko 0:2.1.1-4.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor python-paramiko-doc 0:2.1.1-4.el7
Red Hat · Rhev Manager 4 rhev_manager:4 python-paramiko 0:2.1.1-4.el7
Red Hat · Rhev Manager 4 rhev_manager:4 python-paramiko-doc 0:2.1.1-4.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-7750 Public exploit EPSS 27%

    Paramiko not properly checking authentication before processing other requests

    transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed b…

    paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557130
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1562393
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1274.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-7750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-7750
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-7750