UBUNTU-CVE-2018-7750

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2018-7750

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-7750.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-7750

Related

Published

2018-03-13T00:00:00Z

Modified

2018-03-13T00:00:00Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

References

Affected packages

Ubuntu:14.04:LTS / paramiko

Package

Name: paramiko
Purl: pkg:deb/ubuntu/paramiko@1.10.1-1git1ubuntu0.1?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.10.1-1git1ubuntu0.1

Affected versions

1.*

1.10.1-1

1.10.1-1git1

1.10.1-1git1build1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "high",
    "binaries": [
        {
            "python-paramiko": "1.10.1-1git1ubuntu0.1",
            "paramiko-doc": "1.10.1-1git1ubuntu0.1"
        }
    ]
}

Ubuntu:16.04:LTS / paramiko

Package

Name: paramiko
Purl: pkg:deb/ubuntu/paramiko@1.16.0-1ubuntu0.1?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.0-1ubuntu0.1

Affected versions

1.*

1.15.2-1

1.15.3-1

1.15.3-1ubuntu1

1.16.0-1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "high",
    "binaries": [
        {
            "python-paramiko": "1.16.0-1ubuntu0.1",
            "python3-paramiko": "1.16.0-1ubuntu0.1",
            "paramiko-doc": "1.16.0-1ubuntu0.1"
        }
    ]
}