Skip to content
OpenAdvisories
Medium USN-5351-2 1 CVE

paramiko vulnerability

Published Mar 30, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5351-1 fixed a vulnerability in Paramiko. This update provides
the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Jan Schejbal discovered that Paramiko incorrectly handled permissions when
writing private key files. A local attacker could possibly use this issue
to gain access to private keys.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS paramiko 1.16.0-1ubuntu0.2+esm2

Vulnerabilities 1

  • Medium 5.9
    CVE-2022-24302

    Race Condition in Paramiko

    In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

    paramiko paramiko paramiko Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-24302