Vulnerabilities > CVE-2018-7750 - Improper Authentication vulnerability in multiple products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
paramiko
redhat
debian
CWE-287
nessus
exploit available

Summary

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

Vulnerable Configurations

Part Description Count
Application
Paramiko
85
Application
Redhat
5
OS
Redhat
9
OS
Debian
2

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Authentication Abuse
    An attacker obtains unauthorized access to an application, service or device either through knowledge of the inherent weaknesses of an authentication mechanism, or by exploiting a flaw in the authentication scheme's implementation. In such an attack an authentication mechanism is functioning but a carefully controlled sequence of events causes the mechanism to grant access to the attacker. This attack may exploit assumptions made by the target's authentication procedures, such as assumptions regarding trust relationships or assumptions regarding the generation of secret values. This attack differs from Authentication Bypass attacks in that Authentication Abuse allows the attacker to be certified as a valid user through illegitimate means, while Authentication Bypass allows the user to access protected material without ever being certified as an authenticated user. This attack does not rely on prior sessions established by successfully authenticating users, as relied upon for the "Exploitation of Session Variables, Resource IDs and other Trusted Credentials" attack patterns.
  • Exploiting Trust in Client (aka Make the Client Invisible)
    An attack of this type exploits a programs' vulnerabilities in client/server communication channel authentication and data integrity. It leverages the implicit trust a server places in the client, or more importantly, that which the server believes is the client. An attacker executes this type of attack by placing themselves in the communication channel between client and server such that communication directly to the server is possible where the server believes it is communicating only with a valid client. There are numerous variations of this type of attack.
  • Utilizing REST's Trust in the System Resource to Register Man in the Middle
    This attack utilizes a REST(REpresentational State Transfer)-style applications' trust in the system resources and environment to place man in the middle once SSL is terminated. Rest applications premise is that they leverage existing infrastructure to deliver web services functionality. An example of this is a Rest application that uses HTTP Get methods and receives a HTTP response with an XML document. These Rest style web services are deployed on existing infrastructure such as Apache and IIS web servers with no SOAP stack required. Unfortunately from a security standpoint, there frequently is no interoperable identity security mechanism deployed, so Rest developers often fall back to SSL to deliver security. In large data centers, SSL is typically terminated at the edge of the network - at the firewall, load balancer, or router. Once the SSL is terminated the HTTP request is in the clear (unless developers have hashed or encrypted the values, but this is rare). The attacker can utilize a sniffer such as Wireshark to snapshot the credentials, such as username and password that are passed in the clear once SSL is terminated. Once the attacker gathers these credentials, they can submit requests to the web service provider just as authorized user do. There is not typically an authentication on the client side, beyond what is passed in the request itself so once this is compromised, then this is generally sufficient to compromise the service's authentication scheme.
  • Man in the Middle Attack
    This type of attack targets the communication between two components (typically client and server). The attacker places himself in the communication channel between the two components. Whenever one component attempts to communicate with the other (data flow, authentication challenges, etc.), the data first goes to the attacker, who has the opportunity to observe or alter it, and it is then passed on to the other component as if it was never intercepted. This interposition is transparent leaving the two compromised components unaware of the potential corruption or leakage of their communications. The potential for Man-in-the-Middle attacks yields an implicit lack of trust in communication or identify between two components.

Exploit-Db

fileexploits/linux/remote/45712.py
idEDB-ID:45712
last seen2018-11-30
modified2018-10-29
platformlinux
port
published2018-10-29
reporterExploit-DB
sourcehttps://www.exploit-db.com/download/45712
titleParamiko 2.4.1 - Authentication Bypass
typeremote

Nessus

  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-0646.NASL
    descriptionAn update for python-paramiko is now available for Red Hat Ansible Engine 2 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id108982
    published2018-04-11
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108982
    titleRHEL 7 : python-paramiko (RHSA-2018:0646)
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2018-8F9D81A3FB.NASL
    descriptionA flaw was found in the implementation of `transport.py` in Paramiko, which did not properly check whether authentication was completed before processing other requests. A customized SSH client could simply skip the authentication step. This flaw is a user authentication bypass in the SSH Server functionality of Paramiko. Where Paramiko is used only for its client-side functionality (e.g. `paramiko.SSHClient`), the vulnerability is not exposed and thus cannot be exploited. This update also fixes an issue where Ed25519 auth key decryption raised an unexpected exception when given a unicode password string (typical in Python 3). Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-05
    modified2019-01-03
    plugin id120611
    published2019-01-03
    reporterThis script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/120611
    titleFedora 28 : python-paramiko (2018-8f9d81a3fb)
  • NASL familyPhotonOS Local Security Checks
    NASL idPHOTONOS_PHSA-2018-2_0-0037.NASL
    descriptionAn update of {'mercurial', 'python2', 'zsh', 'pycrypto', 'patch', 'binutils', 'paramiko', 'httpd', 'mysql', 'xerces-c', 'util-linux', 'net-snmp', 'python3', 'sqlite'} packages of Photon OS has been released.
    last seen2019-02-21
    modified2019-02-07
    plugin id111297
    published2018-07-24
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=111297
    titlePhoton OS 2.0 : Zsh / Python3 / Xerces / Mercurial / Pmd / Pycrypto / Net / Python2 / Util / Mysql / Paramiko / Binutils / Patch / Sqlite (PhotonOS-PHSA-2018-2.0-0037) (deprecated)
  • NASL familyAmazon Linux Local Security Checks
    NASL idALA_ALAS-2018-989.NASL
    descriptionAuthentication bypass in transport.py transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step. (CVE-2018-7750 )
    last seen2020-06-01
    modified2020-06-02
    plugin id108850
    published2018-04-06
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108850
    titleAmazon Linux AMI : python-paramiko (ALAS-2018-989)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-1125.NASL
    descriptionAn update for python-paramiko is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.6 Advanced Update Support, Red Hat Enterprise Linux 6.6 Telco Extended Update Support, and Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id109027
    published2018-04-13
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109027
    titleRHEL 6 : python-paramiko (RHSA-2018:1125)
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2018-305.NASL
    descriptionThis update for python-paramiko fixes the following issues : - CVE-2018-7750: Fixed transport.py in the SSH server implementation of Paramiko that does not properly check whether authentication is completed before processing other requests (bsc#1085276).
    last seen2020-06-05
    modified2018-03-27
    plugin id108632
    published2018-03-27
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108632
    titleopenSUSE Security Update : python-paramiko (openSUSE-2018-305)
  • NASL familyOracleVM Local Security Checks
    NASL idORACLEVM_OVMSA-2018-0034.NASL
    descriptionThe remote OracleVM system is missing necessary patches to address critical security updates : - Fix and enable tests (%check). - Backport a change which makes tests exit with nonzero status when they fail. - Add a fix for upstream tests for CVE-2018-7750 (broken in previous). - Fix a security flaw (CVE-2018-7750) in Paramiko
    last seen2020-06-01
    modified2020-06-02
    plugin id109157
    published2018-04-19
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109157
    titleOracleVM 3.3 / 3.4 : python-paramiko (OVMSA-2018-0034)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-1124.NASL
    descriptionAn update for python-paramiko is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id109026
    published2018-04-13
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109026
    titleRHEL 6 : python-paramiko (RHSA-2018:1124)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-1525.NASL
    descriptionAn update for rhvm-appliance is now available for Red Hat Virtualization 4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is available to download as an OVA file from the Customer Portal. The following packages have been upgraded to a later upstream version: rhvm-appliance (4.2). (BZ#1558801, BZ#1563545) Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) * slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088) * undertow: Client can use bogus uri in Digest authentication (CVE-2017-12196) * jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485) (CVE-2018-5968) * ovirt-engine: account enumeration through login to web console (CVE-2018-1073) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank Chris McCown for reporting CVE-2018-8088. The CVE-2017-12196 issue was discovered by Jan Stourac (Red Hat). Enhancement(s) : * Previously, the default memory allotment for the RHV-M Virtual Appliance was always large enough to include support for user additions. In this release, the RHV-M Virtual Appliance includes a swap partition that enables the memory to be increased when required. (BZ#1422982) * Previously, the partitioning scheme for the RHV-M Virtual Appliance included two primary partitions,
    last seen2020-06-01
    modified2020-06-02
    plugin id109910
    published2018-05-18
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109910
    titleRHEL 7 : Virtualization (RHSA-2018:1525)
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-3603-1.NASL
    descriptionMatthijs Kooijman discovered that Paramiko
    last seen2020-06-01
    modified2020-06-02
    plugin id108514
    published2018-03-21
    reporterUbuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108514
    titleUbuntu 14.04 LTS / 16.04 LTS / 17.10 : paramiko vulnerability (USN-3603-1)
  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2018-1124.NASL
    descriptionAn update for python-paramiko is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id109526
    published2018-05-03
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109526
    titleCentOS 6 : python-paramiko (CESA-2018:1124)
  • NASL familyPhotonOS Local Security Checks
    NASL idPHOTONOS_PHSA-2018-1_0-0126.NASL
    descriptionAn update of 'paramiko', 'mysql', 'mercurial', 'binutils', 'pycrypto', 'patch', 'sqlite-autoconf', 'httpd', 'python3', 'xerces-c', 'strongswan', 'net-snmp' packages of Photon OS has been released.
    last seen2019-02-21
    modified2019-02-07
    plugin id111930
    published2018-08-17
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=111930
    titlePhoton OS 1.0: Binutils / Httpd / Mercurial / Mysql / Net / Paramiko / Patch / Pycrypto / Python3 / Sqlite / Strongswan / Xerces PHSA-2018-1.0-0126 (deprecated)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-1213.NASL
    descriptionAn update for python-paramiko is now available for Red Hat Ansible Engine 2.4 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id109387
    published2018-04-27
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109387
    titleRHEL 7 : python-paramiko (RHSA-2018:1213)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-0591.NASL
    descriptionAn update for python-paramiko is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es) : * python-paramiko has been using the python2-pyasn1 package, but did not depend on it. With new versions of python2-cryptography, python2-pyasn1 was not getting installed and this caused python-paramiko to malfunction. This bug was fixed by making python-paramiko depend on python2-pyasn1 explicitly. (BZ#1559133)
    last seen2020-06-01
    modified2020-06-02
    plugin id108643
    published2018-03-27
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108643
    titleRHEL 7 : python-paramiko (RHSA-2018:0591)
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DLA-1556.NASL
    descriptionCVE-2018-1000805 Fix to prevent malicious clients to trick the Paramiko server into thinking an unauthenticated client is authenticated. CVE-2018-7750 Fix check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step. For Debian 8
    last seen2020-06-01
    modified2020-06-02
    plugin id118469
    published2018-10-29
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/118469
    titleDebian DLA-1556-1 : paramiko security update
  • NASL familyNewStart CGSL Local Security Checks
    NASL idNEWSTART_CGSL_NS-SA-2019-0138_PYTHON-PARAMIKO.NASL
    descriptionThe remote NewStart CGSL host, running version MAIN 4.05, has python-paramiko packages installed that are affected by a vulnerability: - It was found that when acting as an SSH server, paramiko did not properly check whether authentication is completed before processing other requests. A customized SSH client could use this to bypass authentication when accessing any resources controlled by paramiko. (CVE-2018-7750) Note that Nessus has not tested for this issue but has instead relied only on the application
    last seen2020-06-01
    modified2020-06-02
    plugin id127400
    published2019-08-12
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/127400
    titleNewStart CGSL MAIN 4.05 : python-paramiko Vulnerability (NS-SA-2019-0138)
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2018-1124.NASL
    descriptionFrom Red Hat Security Advisory 2018:1124 : An update for python-paramiko is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id109025
    published2018-04-13
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109025
    titleOracle Linux 6 : python-paramiko (ELSA-2018-1124)
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2018-C1769746DA.NASL
    descriptionA flaw was found in the implementation of `transport.py` in Paramiko, which did not properly check whether authentication was completed before processing other requests. A customized SSH client could simply skip the authentication step. This flaw is a user authentication bypass in the SSH Server functionality of Paramiko. Where Paramiko is used only for its client-side functionality (e.g. `paramiko.SSHClient`), the vulnerability is not exposed and thus cannot be exploited. This update also fixes an issue where Ed25519 auth key decryption raised an unexpected exception when given a unicode password string (typical in Python 3). Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-05
    modified2018-04-02
    plugin id108779
    published2018-04-02
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108779
    titleFedora 26 : python-paramiko (2018-c1769746da)
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20180412_PYTHON_PARAMIKO_ON_SL6_X.NASL
    descriptionSecurity Fix(es) : - python-paramiko: Authentication bypass in transport.py (CVE-2018-7750)
    last seen2020-03-18
    modified2018-04-16
    plugin id109057
    published2018-04-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109057
    titleScientific Linux Security Update : python-paramiko on SL6.x (noarch) (20180412)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-1274.NASL
    descriptionAn update for python-paramiko is now available for Red Hat Virtualization 4 Management Agent for RHEL 7 and Red Hat Virtualization Manager 4.1. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. The following packages have been upgraded to a later upstream version: python-paramiko (2.1.1). (BZ#1562393) Security Fix(es) : * python-paramiko: Authentication bypass in transport.py (CVE-2018-7750) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id109567
    published2018-05-04
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109567
    titleRHEL 7 : Virtualization (RHSA-2018:1274)

Packetstorm

Redhat

advisories
  • bugzilla
    id1557130
    titleCVE-2018-7750 python-paramiko: Authentication bypass in transport.py
    oval
    OR
    • commentRed Hat Enterprise Linux must be installed
      ovaloval:com.redhat.rhba:tst:20070304026
    • AND
      • commentRed Hat Enterprise Linux 6 is installed
        ovaloval:com.redhat.rhba:tst:20111656003
      • commentpython-paramiko is earlier than 0:1.7.5-4.el6_9
        ovaloval:com.redhat.rhsa:tst:20181124001
      • commentpython-paramiko is signed with Red Hat redhatrelease2 key
        ovaloval:com.redhat.rhsa:tst:20181124002
    rhsa
    idRHSA-2018:1124
    released2018-04-12
    severityCritical
    titleRHSA-2018:1124: python-paramiko security update (Critical)
  • rhsa
    idRHSA-2018:0591
  • rhsa
    idRHSA-2018:0646
  • rhsa
    idRHSA-2018:1125
  • rhsa
    idRHSA-2018:1213
  • rhsa
    idRHSA-2018:1274
  • rhsa
    idRHSA-2018:1328
  • rhsa
    idRHSA-2018:1525
  • rhsa
    idRHSA-2018:1972
rpms
  • python-paramiko-0:2.1.1-4.el7
  • python-paramiko-doc-0:2.1.1-4.el7
  • python-paramiko-0:2.1.1-4.el7
  • python-paramiko-0:1.7.5-4.el6_9
  • python-paramiko-0:1.7.5-4.el6_4
  • python-paramiko-0:1.7.5-4.el6_5
  • python-paramiko-0:1.7.5-4.el6_6
  • python-paramiko-0:1.7.5-4.el6_7
  • python-paramiko-0:2.1.1-4.el7
  • python-paramiko-0:2.1.1-4.el7
  • python-paramiko-doc-0:2.1.1-4.el7
  • ansible-0:2.4.4.0-1.el7ae
  • ansible-doc-0:2.4.4.0-1.el7ae
  • ansible-tower-0:3.2.4-1.el7at
  • ansible-tower-server-0:3.2.4-1.el7at
  • ansible-tower-setup-0:3.2.4-1.el7at
  • ansible-tower-ui-0:3.2.4-1.el7at
  • ansible-tower-venv-ansible-0:3.2.4-1.el7at
  • ansible-tower-venv-tower-0:3.2.4-1.el7at
  • cfme-0:5.9.2.4-1.el7cf
  • cfme-amazon-smartstate-0:5.9.2.4-1.el7cf
  • cfme-appliance-0:5.9.2.4-1.el7cf
  • cfme-appliance-common-0:5.9.2.4-1.el7cf
  • cfme-appliance-debuginfo-0:5.9.2.4-1.el7cf
  • cfme-appliance-tools-0:5.9.2.4-1.el7cf
  • cfme-debuginfo-0:5.9.2.4-1.el7cf
  • cfme-gemset-0:5.9.2.4-1.el7cf
  • cfme-gemset-debuginfo-0:5.9.2.4-1.el7cf
  • dbus-api-service-0:1.0.1-3.el7cf
  • httpd-configmap-generator-0:0.2.1-2.el7cf
  • postgresql96-0:9.6.6-1PGDG.el7
  • postgresql96-contrib-0:9.6.6-1PGDG.el7
  • postgresql96-debuginfo-0:9.6.6-1PGDG.el7
  • postgresql96-devel-0:9.6.6-1PGDG.el7
  • postgresql96-docs-0:9.6.6-1PGDG.el7
  • postgresql96-libs-0:9.6.6-1PGDG.el7
  • postgresql96-plperl-0:9.6.6-1PGDG.el7
  • postgresql96-plpython-0:9.6.6-1PGDG.el7
  • postgresql96-pltcl-0:9.6.6-1PGDG.el7
  • postgresql96-server-0:9.6.6-1PGDG.el7
  • postgresql96-test-0:9.6.6-1PGDG.el7
  • python-paramiko-0:2.1.1-4.el7
  • python-paramiko-doc-0:2.1.1-4.el7
  • rh-ruby23-rubygem-json-0:2.1.0-1.el7cf
  • rh-ruby23-rubygem-json-debuginfo-0:2.1.0-1.el7cf
  • rh-ruby23-rubygem-json-doc-0:2.1.0-1.el7cf
  • rh-ruby23-rubygem-qpid_proton-0:0.22.0-2.el7cf
  • rh-ruby23-rubygem-qpid_proton-debuginfo-0:0.22.0-2.el7cf
  • rh-ruby23-rubygem-qpid_proton-doc-0:0.22.0-2.el7cf
  • rhvm-appliance-2:4.2-20180504.0.el7
  • ansible-0:2.4.4.0-1.el7ae
  • ansible-tower-server-0:3.1.7-1.el7at
  • ansible-tower-setup-0:3.1.7-1.el7at
  • cfme-0:5.8.4.5-1.el7cf
  • cfme-appliance-0:5.8.4.5-1.el7cf
  • cfme-appliance-debuginfo-0:5.8.4.5-1.el7cf
  • cfme-debuginfo-0:5.8.4.5-1.el7cf
  • cfme-gemset-0:5.8.4.5-1.el7cf
  • python-paramiko-0:2.1.1-4.el7
  • python-paramiko-doc-0:2.1.1-4.el7
  • rh-ruby23-rubygem-json-0:2.1.0-1.el7cf
  • rh-ruby23-rubygem-json-debuginfo-0:2.1.0-1.el7cf
  • rh-ruby23-rubygem-json-doc-0:2.1.0-1.el7cf