ISOMAN

CVE

CVE-2018-1000805

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://access.redhat.com/errata/RHBA-2018:3497
  2. https://access.redhat.com/errata/RHSA-2018:3347
  3. https://access.redhat.com/errata/RHSA-2018:3406
  4. https://access.redhat.com/errata/RHSA-2018:3505
  5. https://github.com/paramiko/paramiko/issues/1283
  6. https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt
  7. https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html
  8. https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html
  9. https://usn.ubuntu.com/3796-1/
  10. https://usn.ubuntu.com/3796-2/
  11. https://usn.ubuntu.com/3796-3/
  12. https://access.redhat.com/errata/RHBA-2018:3497
  13. https://access.redhat.com/errata/RHSA-2018:3347
  14. https://access.redhat.com/errata/RHSA-2018:3406
  15. https://access.redhat.com/errata/RHSA-2018:3505
  16. https://github.com/paramiko/paramiko/issues/1283
  17. https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt
  18. https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html
  19. https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html
  20. https://usn.ubuntu.com/3796-1/