https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:13:06 +0000 https://vulnerability.circl.lu/vuln/cve-2018-7750 <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> https://vulnerability.circl.lu/vuln/cve-2018-7750 https://vulnerability.circl.lu/vuln/usn-3603-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: paramiko, Ubuntu:16.04:LTS: paramiko</p> <p>Matthijs Kooijman discovered that Paramiko&#39;s SSH server implementation did not properly require authentication before processing requests. An unauthenticated remote attacker could possibly use this to execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: paramiko, Ubuntu:16.04:LTS: paramiko</p> <p>Matthijs Kooijman discovered that Paramiko&#39;s SSH server implementation did not properly require authentication before processing requests. An unauthenticated remote attacker could possibly use this to execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-3603-1