exploitDog

CVE-2018-7750

Опубликовано: 13 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

Ссылки

http://www.securityfocus.com/bid/103713
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0591
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0646
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1124
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1125
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1213
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1274
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1328
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1525
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1972
Third Party Advisory
https://github.com/paramiko/paramiko/blob/master/sites/www/changelog.rst
Third Party Advisory
https://github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516
Patch
Third Party Advisory
https://github.com/paramiko/paramiko/issues/1175
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/3603-1/
Third Party Advisory
https://usn.ubuntu.com/3603-2/
Third Party Advisory
https://www.exploit-db.com/exploits/45712/
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/103713
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0591
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*

Версия до 1.17.6 (исключая)

cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*

Версия от 1.18.0 (включая) до 1.18.5 (исключая)

cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.0.8 (исключая)

cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*

Версия от 2.1.0 (включая) до 2.1.5 (исключая)

cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.2.3 (исключая)

cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*

Версия от 2.3.0 (включая) до 2.3.2 (исключая)

cpe:2.3:a:paramiko:paramiko:2.4.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*

cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*

cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*

cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.16054

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2018-7750

CVSS3: 9.8

ubuntu

больше 7 лет назад

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

CVE-2018-7750

CVSS3: 9.8

redhat

больше 7 лет назад

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

CVE-2018-7750

CVSS3: 9.8

debian

больше 7 лет назад

transport.py in the SSH server implementation of Paramiko before 1.17. ...

openSUSE-SU-2018:0799-1

suse-cvrf

больше 7 лет назад

Security update for python-paramiko

SUSE-SU-2018:2777-1

suse-cvrf

около 7 лет назад

Security update for python-paramiko

EPSS

Процентиль: 94%

0.16054

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287