CVE-2018-7750

CRITICAL EPSS 97.8%

Published Mar 13, 20188y ago · Modified Jun 17, 20262w ago

9.8 CVSS 3.1

Critical

Published Mar 13, 2018 8y ago

Last Modified Jun 17, 2026 2w ago

Description

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

CVSS Details

Base Score

9.8

Exploitability

3.9

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

97.8% percentile

Exploit & Patch Status

Public Exploit Known

Patch Available

Weaknesses 1

CWE-287 Improper Authentication Authentication

Affected Products 23

Vendor	Product	Version	Range
paramiko	paramiko	*	<1.17.6
paramiko	paramiko	*	≥1.18.0 – <1.18.5
paramiko	paramiko	*	≥2.0.0 – <2.0.8
paramiko	paramiko	*	≥2.1.0 – <2.1.5
paramiko	paramiko	*	≥2.2.0 – <2.2.3
paramiko	paramiko	*	≥2.3.0 – <2.3.2
paramiko	paramiko	2.4.0	any
redhat	ansible_engine	2.0	any
redhat	ansible_engine	2.4	any
redhat	cloudforms	4.5	any
redhat	cloudforms	4.6	any
redhat	virtualization	4.1	any
redhat	enterprise_linux_desktop	6.0	any
redhat	enterprise_linux_server	6.0	any
redhat	enterprise_linux_server	7.0	any
redhat	enterprise_linux_server_aus	6.4	any
redhat	enterprise_linux_server_aus	6.5	any
redhat	enterprise_linux_server_aus	6.6	any
redhat	enterprise_linux_server_eus	6.7	any
redhat	enterprise_linux_server_tus	6.6	any
redhat	enterprise_linux_workstation	6.0	any
debian	debian_linux	8.0	any
debian	debian_linux	9.0	any

References 18

securityfocus.com http://www.securityfocus.com/bid/103713

Third Party AdvisoryVDB Entry
access.redhat.com https://access.redhat.com/errata/RHSA-2018:0591

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:0646

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:1124

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:1125

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:1213

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:1274

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:1328

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:1525

Third Party Advisory
access.redhat.com https://access.redhat.com/errata/RHSA-2018:1972

Third Party Advisory
github.com https://github.com/paramiko/paramiko/blob/master/sites/www/changelog.rst

Third Party Advisory
github.com https://github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516

PatchThird Party Advisory
github.com https://github.com/paramiko/paramiko/issues/1175

Issue TrackingThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html

Mailing ListThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html

Mailing ListThird Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/3603-1/

Third Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/3603-2/

Third Party Advisory
exploit-db.com https://www.exploit-db.com/exploits/45712/

ExploitThird Party AdvisoryVDB Entry

Remediation

github.com https://github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516

PatchThird Party Advisory