CVE-2018-1000805
Paramiko Authentication Bypass vulnerability
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
8.8
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
CVE-2018-1000805- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE List No score
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
CVE-2018-1000805- Updated
- 2026-11-02
EUVDEUVD-2018-0112 No score
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
EUVD-2018-0112- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f2j6-wrhh-v25m
8.7
Paramiko Authentication Bypass vulnerability
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
GHSA-f2j6-wrhh-v25m- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-732, CWE-863
- Updated
- 2026-11-02
OSVALPINE-CVE-2018-1000805
8.8
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
ALPINE-CVE-2018-1000805- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
8.8
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
CVE-2018-1000805- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2018-1000805
8.8
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
DEBIAN-CVE-2018-1000805- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-f2j6-wrhh-v25m
8.7
Paramiko Authentication Bypass vulnerability
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
GHSA-f2j6-wrhh-v25m- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-732, CWE-863
- Updated
- 2026-11-02
OSVOESA-2021-1069
7.8
python-paramiko security update
Paramiko is a combination of the Esperanto words for "paranoid" and "friend". It is a module for Python 2.7/3.4+ that implements the SSH2 protocol for secure (encrypted and authenticated) connections to remote machines.
Security Fix(es):
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.(CVE-2018-1000805)
- Record
OESA-2021-1069- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2018:3497
9.8
Red Hat Bug Fix Advisory: rhvm-appliance security, bug fix, and enhancement update
- Record
RHBA-2018:3497- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:3347
9.8
Red Hat Security Advisory: python-paramiko security update
- Record
RHSA-2018:3347- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:3406
9.8
Red Hat Security Advisory: python-paramiko security update
- Record
RHSA-2018:3406- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:3470
9.8
Red Hat Security Advisory: Red Hat Virtualization security and bug fix update
- Record
RHSA-2018:3470- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-1000805
8.8
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
UBUNTU-CVE-2018-1000805- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0129-1 No score
Security update for python-paramiko
This update for python-paramiko to version 2.4.2 fixes the following issues:
Security issue fixed:
- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)
Non-security issue fixed:
- Disable experimental gssapi support (bsc#1115769)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0129-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11249-1 No score
python-paramiko-doc-2.7.2-3.7 on GA media
These are all security issues fixed in the python-paramiko-doc-2.7.2-3.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11249-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11025-1 No score
python311-paramiko-5.0.0-1.1 on GA media
These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11025-1- Updated
- 2026-11-02
OSVPYSEC-2018-69 No score
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
- Record
PYSEC-2018-69- Updated
- 2026-11-02
OSVSUSE-SU-2019:0174-1 No score
Security update for python-paramiko
This update for python-paramiko to version 2.4.2 fixes the following issues:
Security issue fixed:
- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)
Non-security issue fixed:
- Disable experimental gssapi support (bsc#1115769)
- Record
SUSE-SU-2019:0174-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0396-1 No score
Security update for python-paramiko
This update for python-paramiko to version 2.2.4 fixes the following issues:
Security issue fixed:
- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)
- Record
SUSE-SU-2019:0396-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0481-1 No score
Security update for python-amqp, python-oslo.messaging, python-ovs, python-paramiko, python-psql2mysql
This update for python-amqp, python-oslo.messaging, python-ovs, python-paramiko, python-psql2mysql fixes the following issues:
Security issue fixed for python-paramiko:
- CVE-2018-1000805: Fixed an authentication bypass (bnc#1111151).
Non-security issues fixed:
- python-oslo.messaging: Fixed an issue if the client tries to reconnect after connection was lost (bsc#1123054).
- python-ovs: Fixed memory leak in c parser (bsc#1116437).
- python-ovs: Switched away from noarch and build the C based backend (bsc#1115099).
- python-psql2mysql: Update to version 0.5.0+git.1539592188.13e5d0f.
- Record
SUSE-SU-2019:0481-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1274-1 No score
Security update for python-paramiko
This update for python-paramiko to 2.0.9 fixes the following issues:
Security issue fixed:
- CVE-2018-1000805: Fixed an authentication bypass (bnc#1111151).
- Record
SUSE-SU-2020:1274-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0038-1 No score
Security update for python-paramiko
This update for python-paramiko fixes the following issue:
- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151).
- Record
SUSE-SU-2021:0038-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3730-1 No score
Security update for python-paramiko
This update for python-paramiko fixes the following issues:
Updated to version 2.4.3:
- CVE-2018-1000805: Fixed authentication bypass (bsc#1111151).
Bugfixes:
- Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603).
- Record
SUSE-SU-2022:3730-1- Updated
- 2026-11-02
OSVUSN-3796-1 No score
paramiko vulnerability
Daniel Hoffman discovered that Paramiko incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass authentication without any credentials.
- Record
USN-3796-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
paramikoPyPI |
2.4.0 up to 2.4.2 | 2.4.2 |
paramikoPyPI |
2.3.0 up to 2.3.3 | 2.3.3 |
paramikoPyPI |
2.2.0 up to 2.2.4 | 2.2.4 |
paramikoPyPI |
2.1.0 up to 2.1.6 | 2.1.6 |
paramikoPyPI |
1.5.1 up to 2.0.9 | 2.0.9 |
py-paramikoAlpine:v3.6 |
before 2.1.6-r0 | 2.1.6-r0 |
py-paramikoAlpine:v3.7 |
before 2.4.2-r0 | 2.4.2-r0 |
py-paramikoAlpine:v3.8 |
before 2.4.2-r0 | 2.4.2-r0 |
py3-paramikoAlpine:v3.11 |
before 2.4.2-r0 | 2.4.2-r0 |
py3-paramikoAlpine:v3.12 |
before 2.4.2-r0 | 2.4.2-r0 |
Show 77 moreShow less
| Package | Affected | Fixed |
|---|---|---|
py3-paramikoAlpine:v3.13 |
before 2.4.2-r0 | 2.4.2-r0 |
py3-paramikoAlpine:v3.14 |
before 2.4.2-r0 | 2.4.2-r0 |
paramikoDebian:12 |
before 2.4.2-0.1 | 2.4.2-0.1 |
paramikoDebian:13 |
before 2.4.2-0.1 | 2.4.2-0.1 |
paramikoDebian:14 |
before 2.4.2-0.1 | 2.4.2-0.1 |
paramikoDebian:8 |
before 1.15.1-1+deb8u1, plus listed versions 1.15.1-1 |
1.15.1-1+deb8u1 |
paramikoDebian:9 |
before 2.0.0-1+deb9u1, plus listed versions 2.0.0-1 |
2.0.0-1+deb9u1 |
paramikoPyPI |
2.4.0 up to 2.4.2, plus listed versions 2.4.1 |
2.4.2 |
paramikoPyPI |
2.3.0 up to 2.3.3, plus listed versions 2.3.12.3.2 |
2.3.3 |
paramikoPyPI |
2.2.0 up to 2.2.4, plus listed versions 2.2.12.2.22.2.3 |
2.2.4 |
paramikoPyPI |
2.1.0 up to 2.1.6, plus listed versions 2.1.12.1.22.1.32.1.42.1.5 |
2.1.6 |
paramikoPyPI |
1.5.1 up to 2.0.9, plus listed versions 1.10.01.10.11.10.21.10.31.10.4 Show 45 moreShow less1.10.51.10.61.10.71.11.01.11.11.11.21.11.31.11.41.11.51.11.61.12.01.12.11.12.21.12.31.12.41.13.01.13.11.13.21.13.31.13.41.14.01.14.11.14.21.14.31.15.01.15.11.15.21.15.31.15.41.15.51.16.01.16.11.16.21.16.31.17.01.17.11.17.21.17.31.17.41.17.51.17.61.18.01.18.11.18.21.18.3 |
2.0.9 |
python-paramikoopenEuler:20.03-LTS |
before 2.4.1-8.oe1 | 2.4.1-8.oe1 |
python-paramikoopenEuler:20.03-LTS-SP1 |
before 2.4.1-8.oe1 | 2.4.1-8.oe1 |
rhvm-applianceRed Hat:enterprise_linux:7::hypervisor |
before 2:4.2-20181026.1.el7 | 2:4.2-20181026.1.el7 |
python-paramikoRed Hat:enterprise_linux:7::client |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramiko-docRed Hat:enterprise_linux:7::client |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramikoRed Hat:enterprise_linux:7::computenode |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramiko-docRed Hat:enterprise_linux:7::computenode |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramikoRed Hat:enterprise_linux:7::server |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramiko-docRed Hat:enterprise_linux:7::server |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramikoRed Hat:enterprise_linux:7::workstation |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramiko-docRed Hat:enterprise_linux:7::workstation |
before 0:2.1.1-9.el7 | 0:2.1.1-9.el7 |
python-paramikoRed Hat:enterprise_linux:6::client |
before 0:1.7.5-5.el6_10 | 0:1.7.5-5.el6_10 |
python-paramikoRed Hat:enterprise_linux:6::computenode |
before 0:1.7.5-5.el6_10 | 0:1.7.5-5.el6_10 |
python-paramikoRed Hat:rhel_eus:6.7::computenode |
before 0:1.7.5-4.el6_7.1 | 0:1.7.5-4.el6_7.1 |
python-paramikoRed Hat:enterprise_linux:6::server |
before 0:1.7.5-5.el6_10 | 0:1.7.5-5.el6_10 |
python-paramikoRed Hat:rhel_aus:6.4::server |
before 0:1.7.5-4.el6_4.1 | 0:1.7.5-4.el6_4.1 |
python-paramikoRed Hat:rhel_aus:6.5::server |
before 0:1.7.5-4.el6_5.1 | 0:1.7.5-4.el6_5.1 |
python-paramikoRed Hat:rhel_aus:6.6::server |
before 0:1.7.5-4.el6_6.1 | 0:1.7.5-4.el6_6.1 |
python-paramikoRed Hat:rhel_tus:6.6::server |
before 0:1.7.5-4.el6_6.1 | 0:1.7.5-4.el6_6.1 |
python-paramikoRed Hat:rhel_eus:6.7::server |
before 0:1.7.5-4.el6_7.1 | 0:1.7.5-4.el6_7.1 |
python-paramikoRed Hat:enterprise_linux:6::workstation |
before 0:1.7.5-5.el6_10 | 0:1.7.5-5.el6_10 |
redhat-virtualization-hostRed Hat:enterprise_linux:7::hypervisor |
before 0:4.2-20181026.0.el7_6 | 0:4.2-20181026.0.el7_6 |
redhat-virtualization-host-image-updateRed Hat:enterprise_linux:7::hypervisor |
before 0:4.2-20181026.0.el7_6 | 0:4.2-20181026.0.el7_6 |
imgbasedRed Hat:enterprise_linux:7::hypervisor |
before 0:1.0.29-1.el7ev | 0:1.0.29-1.el7ev |
python-imgbasedRed Hat:enterprise_linux:7::hypervisor |
before 0:1.0.29-1.el7ev | 0:1.0.29-1.el7ev |
redhat-release-virtualization-hostRed Hat:enterprise_linux:7::hypervisor |
before 0:4.2-7.3.el7 | 0:4.2-7.3.el7 |
redhat-virtualization-host-image-update-placeholderRed Hat:enterprise_linux:7::hypervisor |
before 0:4.2-7.3.el7 | 0:4.2-7.3.el7 |
python-paramikoSUSE:Linux Enterprise Module for Basesystem 15 |
before 2.4.2-3.3.2 | 2.4.2-3.3.2 |
python-paramikoSUSE:Linux Enterprise Module for Public Cloud 15 |
before 2.4.2-3.3.2 | 2.4.2-3.3.2 |
python-paramikoSUSE:HPE Helion OpenStack 8 |
before 2.2.4-4.3.1 | 2.2.4-4.3.1 |
python-paramikoSUSE:OpenStack Cloud 8 |
before 2.2.4-4.3.1 | 2.2.4-4.3.1 |
python-paramikoSUSE:OpenStack Cloud Crowbar 8 |
before 2.2.4-4.3.1 | 2.2.4-4.3.1 |
python-amqpSUSE:OpenStack Cloud 7 |
before 1.4.9-3.3.1 | 1.4.9-3.3.1 |
python-oslo.messagingSUSE:OpenStack Cloud 7 |
before 5.10.2-3.9.1 | 5.10.2-3.9.1 |
python-ovsSUSE:OpenStack Cloud 7 |
before 2.5.0-3.3.1 | 2.5.0-3.3.1 |
python-paramikoSUSE:OpenStack Cloud 7 |
before 2.0.9-3.6.1 | 2.0.9-3.6.1 |
python-psql2mysqlSUSE:OpenStack Cloud 7 |
before 0.5.0+git.1539592188.13e5d0f-1.9.1 | 0.5.0+git.1539592188.13e5d0f-1.9.1 |
python-paramikoSUSE:Enterprise Storage 4 |
before 2.0.9-3.6.1 | 2.0.9-3.6.1 |
python-paramikoSUSE:Enterprise Storage 5 |
before 2.0.9-3.6.1 | 2.0.9-3.6.1 |
python-paramikoSUSE:Linux Enterprise Module for Public Cloud 12 |
before 2.1.3-9.6.1 | 2.1.3-9.6.1 |
python-paramikoSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Module for Python 2 15 SP3 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Server 15 SP1-BCL |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Server 15 SP2-BCL |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Manager Proxy 4.1 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Manager Retail Branch Server 4.1 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Manager Server 4.1 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Enterprise Storage 6 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoSUSE:Enterprise Storage 7 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoopenSUSE:Leap 15.3 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
python-paramikoopenSUSE:Leap 15.4 |
before 2.4.3-150100.6.15.1 | 2.4.3-150100.6.15.1 |
paramikoUbuntu:14.04:LTS |
before 1.10.1-1git1ubuntu0.2, plus listed versions 1.10.1-11.10.1-1git11.10.1-1git1build11.10.1-1git1ubuntu0.1 |
1.10.1-1git1ubuntu0.2 |
paramikoUbuntu:16.04:LTS |
before 1.16.0-1ubuntu0.2, plus listed versions 1.15.2-11.15.3-11.15.3-1ubuntu11.16.0-11.16.0-1ubuntu0.1 |
1.16.0-1ubuntu0.2 |
paramikoUbuntu:18.04:LTS |
before 2.0.0-1ubuntu1.1, plus listed versions 2.0.0-12.0.0-1ubuntu1 |
2.0.0-1ubuntu1.1 |
python-paramikoopenSUSE:Tumbleweed |
before 2.7.2-3.7 | 2.7.2-3.7 |
python-paramikoopenSUSE:Tumbleweed |
before 5.0.0-1.1 | 5.0.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-1000805 is a high vulnerability (CVSS 8.8) in Paramiko, published October 8, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.41%, the 91st percentile. Fixed in paramiko 2.4.2.
References
access.redhat.com/errata/RHSA-2018:3347
access.redhat.com/errata/RHSA-2018:3406
github.com/paramiko/paramiko/issues/1283
usn.ubuntu.com/3796-3
access.redhat.com/errata/RHSA-2018:3505
lists.debian.org/debian-lts-announce/2018/10/msg00018.html
Show 131 moreShow less
access.redhat.com/errata/RHBA-2018:3497
usn.ubuntu.com/3796-2
usn.ubuntu.com/3796-1
herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt
lists.debian.org/debian-lts-announce/2021/12/msg00025.html
nvd.nist.gov/vuln/detail/CVE-2018-1000805
github.com/advisories/GHSA-f2j6-wrhh-v25m
github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2018-69.yaml
security.alpinelinux.org/vuln/CVE-2018-1000805
security-tracker.debian.org/tracker/CVE-2018-1000805
github.com/paramiko/paramiko
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1069
bugzilla.redhat.com/show_bug.cgi?id=1625894
bugzilla.redhat.com/show_bug.cgi?id=1635987
bugzilla.redhat.com/show_bug.cgi?id=1636387
security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_3497.json
access.redhat.com/security/cve/CVE-2018-1000805
bugzilla.redhat.com/show_bug.cgi?id=1637263
cve.org/CVERecord?id=CVE-2018-1000805
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3347.json
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3406.json
access.redhat.com/errata/RHSA-2018:3470
bugzilla.redhat.com/show_bug.cgi?id=1501276
bugzilla.redhat.com/show_bug.cgi?id=1593731
bugzilla.redhat.com/show_bug.cgi?id=1596008
bugzilla.redhat.com/show_bug.cgi?id=1601298
bugzilla.redhat.com/show_bug.cgi?id=1601642
bugzilla.redhat.com/show_bug.cgi?id=1601657
bugzilla.redhat.com/show_bug.cgi?id=1607617
bugzilla.redhat.com/show_bug.cgi?id=1607618
bugzilla.redhat.com/show_bug.cgi?id=1610659
bugzilla.redhat.com/show_bug.cgi?id=1612658
bugzilla.redhat.com/show_bug.cgi?id=1612659
bugzilla.redhat.com/show_bug.cgi?id=1612660
bugzilla.redhat.com/show_bug.cgi?id=1612664
bugzilla.redhat.com/show_bug.cgi?id=1612805
bugzilla.redhat.com/show_bug.cgi?id=1613143
bugzilla.redhat.com/show_bug.cgi?id=1613231
bugzilla.redhat.com/show_bug.cgi?id=1614971
bugzilla.redhat.com/show_bug.cgi?id=1619590
bugzilla.redhat.com/show_bug.cgi?id=1624453
bugzilla.redhat.com/show_bug.cgi?id=1626960
bugzilla.redhat.com/show_bug.cgi?id=1631576
bugzilla.redhat.com/show_bug.cgi?id=1632585
bugzilla.redhat.com/show_bug.cgi?id=1632974
bugzilla.redhat.com/show_bug.cgi?id=1633431
bugzilla.redhat.com/show_bug.cgi?id=1635926
bugzilla.redhat.com/show_bug.cgi?id=1635929
bugzilla.redhat.com/show_bug.cgi?id=1636880
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3470.json
access.redhat.com/security/cve/CVE-2018-10858
cve.org/CVERecord?id=CVE-2018-10858
nvd.nist.gov/vuln/detail/CVE-2018-10858
samba.org/samba/security/CVE-2018-10858.html
access.redhat.com/security/cve/CVE-2018-10873
cve.org/CVERecord?id=CVE-2018-10873
nvd.nist.gov/vuln/detail/CVE-2018-10873
access.redhat.com/security/cve/CVE-2018-10904
cve.org/CVERecord?id=CVE-2018-10904
nvd.nist.gov/vuln/detail/CVE-2018-10904
access.redhat.com/security/cve/CVE-2018-10907
cve.org/CVERecord?id=CVE-2018-10907
nvd.nist.gov/vuln/detail/CVE-2018-10907
access.redhat.com/security/cve/CVE-2018-10911
cve.org/CVERecord?id=CVE-2018-10911
nvd.nist.gov/vuln/detail/CVE-2018-10911
access.redhat.com/security/cve/CVE-2018-10913
cve.org/CVERecord?id=CVE-2018-10913
nvd.nist.gov/vuln/detail/CVE-2018-10913
access.redhat.com/security/cve/CVE-2018-10914
cve.org/CVERecord?id=CVE-2018-10914
nvd.nist.gov/vuln/detail/CVE-2018-10914
access.redhat.com/security/cve/CVE-2018-10923
cve.org/CVERecord?id=CVE-2018-10923
nvd.nist.gov/vuln/detail/CVE-2018-10923
access.redhat.com/security/cve/CVE-2018-10926
cve.org/CVERecord?id=CVE-2018-10926
nvd.nist.gov/vuln/detail/CVE-2018-10926
access.redhat.com/security/cve/CVE-2018-10927
cve.org/CVERecord?id=CVE-2018-10927
nvd.nist.gov/vuln/detail/CVE-2018-10927
access.redhat.com/security/cve/CVE-2018-10928
cve.org/CVERecord?id=CVE-2018-10928
nvd.nist.gov/vuln/detail/CVE-2018-10928
access.redhat.com/security/cve/CVE-2018-10929
cve.org/CVERecord?id=CVE-2018-10929
nvd.nist.gov/vuln/detail/CVE-2018-10929
access.redhat.com/security/cve/CVE-2018-10930
cve.org/CVERecord?id=CVE-2018-10930
nvd.nist.gov/vuln/detail/CVE-2018-10930
access.redhat.com/security/cve/CVE-2018-14652
cve.org/CVERecord?id=CVE-2018-14652
nvd.nist.gov/vuln/detail/CVE-2018-14652
access.redhat.com/security/cve/CVE-2018-14653
cve.org/CVERecord?id=CVE-2018-14653
nvd.nist.gov/vuln/detail/CVE-2018-14653
access.redhat.com/security/cve/CVE-2018-14654
cve.org/CVERecord?id=CVE-2018-14654
nvd.nist.gov/vuln/detail/CVE-2018-14654
access.redhat.com/security/cve/CVE-2018-14659
cve.org/CVERecord?id=CVE-2018-14659
nvd.nist.gov/vuln/detail/CVE-2018-14659
access.redhat.com/security/cve/CVE-2018-14660
cve.org/CVERecord?id=CVE-2018-14660
nvd.nist.gov/vuln/detail/CVE-2018-14660
access.redhat.com/security/cve/CVE-2018-14661
cve.org/CVERecord?id=CVE-2018-14661
nvd.nist.gov/vuln/detail/CVE-2018-14661
suse.com/support/update/announcement/2019/suse-su-20190174-1
bugzilla.suse.com/1111151
bugzilla.suse.com/1115769
bugzilla.suse.com/1121846
suse.com/security/cve/CVE-2018-1000805
suse.com/support/update/announcement/2019/suse-su-20190396-1
bugzilla.suse.com/1120531
suse.com/support/update/announcement/2019/suse-su-20190481-1
bugzilla.suse.com/1115099
bugzilla.suse.com/1116437
bugzilla.suse.com/1123054
suse.com/support/update/announcement/2020/suse-su-20201274-1
suse.com/support/update/announcement/2021/suse-su-20210038-1
suse.com/support/update/announcement/2022/suse-su-20223730-1
bugzilla.suse.com/1200603
ubuntu.com/security/CVE-2018-1000805
ubuntu.com/security/notices/USN-3796-1
ubuntu.com/security/notices/USN-3796-2
ubuntu.com/security/notices/USN-3796-3
lists.opensuse.org/archives/list/[email protected]/thread/GCEUJWPR53LIOAKYNV75JBMHWGAAK6SW
suse.com/security/cve/CVE-2018-7750
suse.com/security/cve/CVE-2026-44405
Left out here: 29 versions. The JSON record has them.