CVE-2018-1000805
- Source
- https://cve.org/CVERecord?id=CVE-2018-1000805
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-1000805.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2018-1000805
- Aliases
- Downstream
- Related
- Published
- 2018-10-08T15:29:00.713Z
- Modified
- 2026-02-23T01:41:16.575334Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- References
-
- https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt
- https://access.redhat.com/errata/RHBA-2018:3497
- https://access.redhat.com/errata/RHSA-2018:3347
- https://access.redhat.com/errata/RHSA-2018:3406
- https://access.redhat.com/errata/RHSA-2018:3505
- https://github.com/paramiko/paramiko/issues/1283
- https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html
- https://usn.ubuntu.com/3796-1/
- https://usn.ubuntu.com/3796-2/
- https://usn.ubuntu.com/3796-3/
- https://github.com/paramiko/paramiko/issues/1283
- https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html
- https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html
Affected packages
Git / gitlab.com/gnutls/libtasn1
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.com/gnutls/libtasn1
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
Other
gnutls_0_5_0
gnutls_0_5_1
libasn1_0_1_0
libtasn1-0-3-2
libtasn1_0_1_2
libtasn1_0_2_0
libtasn1_0_2_1
libtasn1_0_2_10
libtasn1_0_2_11
libtasn1_0_2_12
libtasn1_0_2_13
libtasn1_0_2_14
libtasn1_0_2_15
libtasn1_0_2_16
libtasn1_0_2_17
libtasn1_0_2_18
libtasn1_0_2_2
libtasn1_0_2_3
libtasn1_0_2_4
libtasn1_0_2_5
libtasn1_0_2_6
libtasn1_0_2_7
libtasn1_0_2_8
libtasn1_0_2_9
libtasn1_0_3_0
libtasn1_0_3_1
libtasn1_0_3_10
libtasn1_0_3_2
libtasn1_0_3_3
libtasn1_0_3_4
libtasn1_0_3_5
libtasn1_0_3_6
libtasn1_0_3_7
libtasn1_0_3_8
libtasn1_0_3_9
libtasn1_1_0
libtasn1_1_1
libtasn1_1_2
libtasn1_1_3
libtasn1_1_4
libtasn1_1_5
libtasn1_1_6
libtasn1_2_0
libtasn1_2_1
libtasn1_2_10
libtasn1_2_11
libtasn1_2_12
libtasn1_2_13
libtasn1_2_2
libtasn1_2_3
libtasn1_2_4
libtasn1_2_5
libtasn1_2_6
libtasn1_2_7
libtasn1_2_8
libtasn1_2_9
libtasn1_3_0
libtasn1_3_1
libtasn1_3_2
libtasn1_3_3
libtasn1_after_rename