NetSight
IP …
critical9.8Public exploit code

CVE-2018-7750

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

Affected products

VendorProductAffected versions
ParamikoParamiko
before 1.17.6
from 1.18.0 before 1.18.5
from 2.0.0 before 2.0.8
from 2.1.0 before 2.1.5
from 2.2.0 before 2.2.3
from 2.3.0 before 2.3.2
RedhatAnsible Engine
Versions 2.0, 2.4
RedhatCloudforms
Versions 4.5, 4.6
RedhatVirtualization
Version 4.1
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.4, 6.5, 6.6
RedhatEnterprise Linux Server Eus
Version 6.7
RedhatEnterprise Linux Server Tus
Version 6.6
RedhatEnterprise Linux Workstation
Version 6.0
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-287

References