{"id":"CVE-2018-1000805","aliases":["ALPINE-CVE-2018-1000805","DEBIAN-CVE-2018-1000805","DLA-1556-1","DLA-2860-1","EUVD-2018-0112","GHSA-f2j6-wrhh-v25m","OESA-2021-1069","PYSEC-2018-69","RHBA-2018:3497","RHSA-2018:3347","RHSA-2018:3406","RHSA-2018:3470","SUSE-SU-2019:0174-1","SUSE-SU-2019:0396-1","SUSE-SU-2019:0481-1","SUSE-SU-2020:1274-1","SUSE-SU-2021:0038-1","SUSE-SU-2022:3730-1","UBUNTU-CVE-2018-1000805","USN-3796-1","openSUSE-SU-2019:0129-1","openSUSE-SU-2024:11249-1","openSUSE-SU-2026:11025-1"],"status":"published","title":"Paramiko Authentication Bypass vulnerability","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.04407,"percentile":0.91464,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732","CWE-863"],"published":"2018-10-08T00:00:00Z","modified":"2026-10-24T10:47:36Z","fixes":[{"ecosystem":"PyPI","package":"paramiko","fixed_in":["2.4.2","2.3.3","2.2.4","2.1.6","2.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.6","package":"py-paramiko","fixed_in":["2.1.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"py-paramiko","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"py-paramiko","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"py3-paramiko","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"py3-paramiko","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"py3-paramiko","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"py3-paramiko","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"paramiko","fixed_in":["2.4.2-0.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"paramiko","fixed_in":["2.4.2-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"paramiko","fixed_in":["2.4.2-0.1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"python-paramiko","fixed_in":["2.4.1-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-paramiko","fixed_in":["2.4.1-8.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rhvm-appliance","fixed_in":["2:4.2-20181026.1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-paramiko","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-paramiko-doc","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-paramiko","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-paramiko-doc","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-paramiko","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-paramiko-doc","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-paramiko","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-paramiko-doc","fixed_in":["0:2.1.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-paramiko","fixed_in":["0:1.7.5-5.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-paramiko","fixed_in":["0:1.7.5-5.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"python-paramiko","fixed_in":["0:1.7.5-4.el6_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-paramiko","fixed_in":["0:1.7.5-5.el6_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.4::server","package":"python-paramiko","fixed_in":["0:1.7.5-4.el6_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"python-paramiko","fixed_in":["0:1.7.5-4.el6_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"python-paramiko","fixed_in":["0:1.7.5-4.el6_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:6.6::server","package":"python-paramiko","fixed_in":["0:1.7.5-4.el6_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.7::server","package":"python-paramiko","fixed_in":["0:1.7.5-4.el6_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-paramiko","fixed_in":["0:1.7.5-5.el6_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python-paramiko","fixed_in":["2.4.2-3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"python-paramiko","fixed_in":["2.4.2-3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-paramiko","fixed_in":["2.2.4-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"python-paramiko","fixed_in":["2.2.4-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-paramiko","fixed_in":["2.2.4-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"python-amqp","fixed_in":["1.4.9-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"python-oslo.messaging","fixed_in":["5.10.2-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"python-ovs","fixed_in":["2.5.0-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"python-paramiko","fixed_in":["2.0.9-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"python-psql2mysql","fixed_in":["0.5.0+git.1539592188.13e5d0f-1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"python-paramiko","fixed_in":["2.0.9-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"python-paramiko","fixed_in":["2.0.9-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-paramiko","fixed_in":["2.1.3-9.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-paramiko","fixed_in":["2.4.3-150100.6.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"paramiko","fixed_in":["1.10.1-1git1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"paramiko","fixed_in":["1.16.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"paramiko","fixed_in":["2.0.0-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.0"},{"fixed":"2.3.3"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.4"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.6"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.1"},{"fixed":"2.0.9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"py-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"py-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"py-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"py3-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"py3-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"py3-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"py3-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-0.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-0.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-1+deb8u1"}]}],"versions":["1.15.1-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-1+deb9u1"}]}],"versions":["2.0.0-1"],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.2"}]}],"versions":["2.4.0","2.4.1"]},{"source":"osv","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.0"},{"fixed":"2.3.3"}]}],"versions":["2.3.0","2.3.1","2.3.2"]},{"source":"osv","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.4"}]}],"versions":["2.2.0","2.2.1","2.2.2","2.2.3"]},{"source":"osv","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.6"}]}],"versions":["2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5"]},{"source":"osv","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.1"},{"fixed":"2.0.9"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.10.3","1.10.4","1.10.5","1.10.6","1.10.7","1.11.0","1.11.1","1.11.2","1.11.3","1.11.4","1.11.5","1.11.6","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.14.0","1.14.1","1.14.2","1.14.3","1.15.0","1.15.1","1.15.2","1.15.3","1.15.4","1.15.5","1.16.0","1.16.1","1.16.2","1.16.3","1.17.0","1.17.1","1.17.2","1.17.3","1.17.4","1.17.5","1.17.6","1.18.0","1.18.1","1.18.2","1.18.3","1.18.4","1.18.5","1.5.1","1.5.2","1.5.4","1.6","1.6.1","1.6.2","1.6.3","1.6.4","1.7","1.7.1","1.7.2","1.7.4","1.7.5","1.7.6","1.7.7.1","1.7.7.2","1.8.0","1.8.1","1.9.0","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-8.oe1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.1"},{"fixed":"2.0.9"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.10.3","1.10.4","1.10.5","1.10.6","1.10.7","1.11.0","1.11.1","1.11.2","1.11.3","1.11.4","1.11.5","1.11.6","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.14.0","1.14.1","1.14.2","1.14.3","1.15.0","1.15.1","1.15.2","1.15.3","1.15.4","1.15.5","1.16.0","1.16.1","1.16.2","1.16.3","1.17.0","1.17.1","1.17.2","1.17.3","1.17.4","1.17.5","1.17.6","1.18.0","1.18.1","1.18.2","1.18.3","1.18.4","1.18.5","1.5.1","1.5.2","1.5.4","1.6","1.6.1","1.6.2","1.6.3","1.6.4","1.7","1.7.1","1.7.2","1.7.4","1.7.5","1.7.6","1.7.7.1","1.7.7.2","1.8.0","1.8.1","1.9.0","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rhvm-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2-20181026.1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-paramiko-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-paramiko-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-paramiko-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-paramiko-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-5.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-5.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::computenode","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-4.el6_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-5.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.4::server","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-4.el6_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-4.el6_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-4.el6_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:6.6::server","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-4.el6_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.7::server","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-4.el6_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.5-5.el6_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.9-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-oslo.messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.2-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.9-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"python-psql2mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0+git.1539592188.13e5d0f-1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.9-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.9-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-9.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150100.6.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1git1ubuntu0.2"}]}],"versions":["1.10.1-1","1.10.1-1git1","1.10.1-1git1build1","1.10.1-1git1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-1ubuntu0.2"}]}],"versions":["1.15.2-1","1.15.3-1","1.15.3-1ubuntu1","1.16.0-1","1.16.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-1ubuntu1.1"}]}],"versions":["2.0.0-1","2.0.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1git1ubuntu0.2"}]}],"versions":["1.10.1-1","1.10.1-1git1","1.10.1-1git1build1","1.10.1-1git1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-1ubuntu0.2"}]}],"versions":["1.15.2-1","1.15.3-1","1.15.3-1ubuntu1","1.16.0-1","1.16.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-1ubuntu1.1"}]}],"versions":["2.0.0-1","2.0.0-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-3.7"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-1.1"}]}],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"paramiko","product":"paramiko"},{"vendor":"redhat","product":"ansible_tower"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"virtualization_host"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:3347","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3406","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/paramiko/paramiko/issues/1283","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://usn.ubuntu.com/3796-3/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHBA-2018:3497","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/3796-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/3796-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt","tags":["x_refsource_MISC","x_transferred","Broken Link","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000805","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f2j6-wrhh-v25m","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2018-69.yaml","tags":["web"]},{"url":"https://usn.ubuntu.com/3796-1","tags":["web"]},{"url":"https://usn.ubuntu.com/3796-2","tags":["web"]},{"url":"https://usn.ubuntu.com/3796-3","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-1000805","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1000805","tags":["advisory"]},{"url":"https://github.com/paramiko/paramiko","tags":["package"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1069","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636387","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_3497.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000805","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3347.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3406.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3470","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636880","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3470.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10858","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2018-10858.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10873","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10904","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10907","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10911","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10911","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10913","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10923","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10926","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10926","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10928","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10930","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10930","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14653","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14653","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14653","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14654","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14659","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14660","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14661","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14661","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190174-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1111151","tags":["report"]},{"url":"https://bugzilla.suse.com/1115769","tags":["report"]},{"url":"https://bugzilla.suse.com/1121846","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000805","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190396-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1120531","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190481-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1115099","tags":["report"]},{"url":"https://bugzilla.suse.com/1116437","tags":["report"]},{"url":"https://bugzilla.suse.com/1123054","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201274-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210038-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223730-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000805","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3796-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3796-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3796-3","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GCEUJWPR53LIOAKYNV75JBMHWGAAK6SW/#GCEUJWPR53LIOAKYNV75JBMHWGAAK6SW","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44405","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-1000805","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T15:00:00Z","modified":"2024-08-05T12:40:47.938Z","updated_at":"2026-11-02T14:35:10.685174Z"}],"euvd":[{"id":"EUVD-2018-0112","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T15:00:00Z","modified":"2024-08-05T12:40:47Z","updated_at":"2026-11-03T02:39:26.268404Z"}],"ghsa":[{"id":"GHSA-f2j6-wrhh-v25m","title":"Paramiko Authentication Bypass vulnerability","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-10T16:10:10Z","modified":"2024-10-09T20:55:51Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-732","CWE-863"],"updated_at":"2026-11-02T14:38:09.785133Z"}],"nvd":[{"id":"CVE-2018-1000805","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T15:29:00.713Z","modified":"2026-06-17T01:33:05.013Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:04:42.52179Z"}],"osv":[{"id":"ALPINE-CVE-2018-1000805","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T15:29:00.713Z","modified":"2026-10-23T17:23:37.566941579Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-1000805","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T15:29:00.713Z","modified":"2026-10-24T10:47:36.994472897Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-1000805","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T15:29:00.713Z","modified":"2026-10-23T18:03:18.359461453Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"GHSA-f2j6-wrhh-v25m","title":"Paramiko Authentication Bypass vulnerability","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-10T16:10:10Z","modified":"2024-10-09T21:10:55.704277Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-732","CWE-863"],"updated_at":"2026-11-02T15:46:45.639885Z"},{"id":"OESA-2021-1069","title":"python-paramiko security update","description":"Paramiko is a combination of the Esperanto words for \"paranoid\" and \"friend\". It is a module for Python 2.7/3.4+ that implements the SSH2 protocol for secure (encrypted and authenticated) connections to remote machines.\r\n\r\nSecurity Fix(es):\r\n\r\nParamiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.(CVE-2018-1000805)","status":"published","published":"2021-03-05T11:04:18Z","modified":"2026-08-18T01:15:17.028621699Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHBA-2018:3497","title":"Red Hat Bug Fix Advisory: rhvm-appliance security, bug fix, and enhancement update","status":"published","published":"2024-09-18T04:07:41Z","modified":"2026-06-29T10:18:46Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2018:3347","title":"Red Hat Security Advisory: python-paramiko security update","status":"published","published":"2024-09-18T04:09:13Z","modified":"2026-06-29T10:22:31Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3406","title":"Red Hat Security Advisory: python-paramiko security update","status":"published","published":"2024-09-18T04:09:08Z","modified":"2026-06-29T10:22:35Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3470","title":"Red Hat Security Advisory: Red Hat Virtualization security and bug fix update","status":"published","published":"2024-09-22T16:32:38Z","modified":"2026-07-01T10:05:01Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-1000805","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T00:00:00Z","modified":"2026-02-04T03:50:19.829078Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1556-1","title":"paramiko - security update","status":"published","published":"2018-10-27T00:00:00Z","modified":"2026-03-09T01:18:40.921Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2860-1","title":"paramiko - security update","status":"published","published":"2021-12-28T00:00:00Z","modified":"2026-03-09T01:20:30.497485Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2019:0129-1","title":"Security update for python-paramiko","description":"This update for python-paramiko to version 2.4.2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)\n\nNon-security issue fixed:\n\n- Disable experimental gssapi support (bsc#1115769)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T10:52:45Z","modified":"2026-02-04T04:31:36.512747Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11249-1","title":"python-paramiko-doc-2.7.2-3.7 on GA media","description":"These are all security issues fixed in the python-paramiko-doc-2.7.2-3.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:33:26.235075Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2026:11025-1","title":"python311-paramiko-5.0.0-1.1 on GA media","description":"These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-13T00:00:00Z","modified":"2026-06-14T14:00:07.56284822Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"PYSEC-2018-69","description":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","status":"published","published":"2018-10-08T15:29:00Z","modified":"2023-11-08T03:59:40.071933Z","updated_at":"2026-11-02T15:52:52.192131Z"},{"id":"SUSE-SU-2019:0174-1","title":"Security update for python-paramiko","description":"This update for python-paramiko to version 2.4.2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)\n\nNon-security issue fixed:\n\n- Disable experimental gssapi support (bsc#1115769)\n","status":"published","published":"2019-01-25T14:59:10Z","modified":"2026-02-04T04:36:00.141008Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0396-1","title":"Security update for python-paramiko","description":"This update for python-paramiko to version 2.2.4 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151)\n","status":"published","published":"2019-02-14T14:15:42Z","modified":"2026-02-04T02:23:28.465632Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0481-1","title":"Security update for python-amqp, python-oslo.messaging, python-ovs, python-paramiko, python-psql2mysql","description":"This update for python-amqp, python-oslo.messaging, python-ovs, python-paramiko, python-psql2mysql fixes the following issues:\n\nSecurity issue fixed for python-paramiko:\n\n- CVE-2018-1000805: Fixed an authentication bypass (bnc#1111151).\n\nNon-security issues fixed:\n\n- python-oslo.messaging: Fixed an issue if the client tries to reconnect after connection was lost (bsc#1123054).\n- python-ovs: Fixed memory leak in c parser (bsc#1116437).\n- python-ovs: Switched away from noarch and build the C based backend (bsc#1115099).\n- python-psql2mysql: Update to version 0.5.0+git.1539592188.13e5d0f.\n","status":"published","published":"2019-02-25T10:56:06Z","modified":"2026-02-04T03:29:21.593293Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2020:1274-1","title":"Security update for python-paramiko","description":"This update for python-paramiko to 2.0.9 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-1000805: Fixed an authentication bypass (bnc#1111151).\n","status":"published","published":"2020-05-14T06:08:00Z","modified":"2025-05-02T04:07:19.006539Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2021:0038-1","title":"Security update for python-paramiko","description":"This update for python-paramiko fixes the following issue:\n\n- CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151).\n","status":"published","published":"2021-01-07T10:50:42Z","modified":"2026-02-04T02:40:56.534649Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2022:3730-1","title":"Security update for python-paramiko","description":"This update for python-paramiko fixes the following issues:\n\nUpdated to version 2.4.3:\n\n- CVE-2018-1000805: Fixed authentication bypass (bsc#1111151).\n\nBugfixes:\n\n- Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603).\n\n","status":"published","published":"2022-10-25T15:02:03Z","modified":"2026-02-04T04:29:46.821345Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-3796-1","title":"paramiko vulnerability","description":"Daniel Hoffman discovered that Paramiko incorrectly handled authentication\nwhen being used as a server. A remote attacker could use this issue to\nbypass authentication without any credentials.\n","status":"published","published":"2018-10-17T12:57:30Z","modified":"2026-02-10T04:41:26Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}