CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-7750
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
Severity
- EPSS
- 27% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- paramiko:paramiko
- redhat:ansible_engine
- redhat:cloudforms
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_eus
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_workstation
- redhat:virtualization
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-232r-66cg-79px | PyPI | paramiko | >=2.0.0 <2.0.8 | 2.0.8 |
| GHSA-232r-66cg-79px | PyPI | paramiko | >=2.1.0 <2.1.5 | 2.1.5 |
| GHSA-232r-66cg-79px | PyPI | paramiko | >=2.2.0 <2.2.3 | 2.2.3 |
| GHSA-232r-66cg-79px | PyPI | paramiko | >=2.3.0 <2.3.2 | 2.3.2 |
| GHSA-232r-66cg-79px | PyPI | paramiko | >=2.4.0 <2.4.1 | 2.4.1 |
| GHSA-232r-66cg-79px | PyPI | paramiko | >=1.18.0 <1.18.5 | 1.18.5 |
| GHSA-232r-66cg-79px | PyPI | paramiko | <1.17.6 | 1.17.6 |
| PYSEC-2018-19 | PyPI | paramiko | <1.17.6 >=1.18.0 <1.18.5 >=2.0.0 <2.0.8 >=2.1.0 <2.1.5 >=2.2.0 <2.2.3 >=2.3.0 <2.3.2 | 1.17.6, 1.18.5, 2.0.8, 2.1.5, 2.2.3, 2.3.2 |