https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:24:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06039 bdu:2022-06039 https://cve.radiocsirt.org/vuln/bdu:2022-06039 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-7750 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-7750 https://cve.radiocsirt.org/vuln/cnvd-2018-06104 cnvd-2018-06104 https://cve.radiocsirt.org/vuln/cnvd-2018-06104 https://cve.radiocsirt.org/vuln/euvd-2026-63388 EUVD-2026-63388 https://cve.radiocsirt.org/vuln/euvd-2026-63388 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7750 <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7750 https://cve.radiocsirt.org/vuln/ghsa-232r-66cg-79px <p><strong>Affected:</strong> PyPI: paramiko</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> <p><strong>Affected:</strong> PyPI: paramiko</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> https://cve.radiocsirt.org/vuln/ghsa-232r-66cg-79px https://cve.radiocsirt.org/vuln/gsd-2018-7750 gsd-2018-7750 https://cve.radiocsirt.org/vuln/gsd-2018-7750 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11249-1 <p>python-paramiko-doc-2.7.2-3.7 on GA media</p> <p>python-paramiko-doc-2.7.2-3.7 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11249-1 https://cve.radiocsirt.org/vuln/pysec-2018-19 <p><strong>Affected:</strong> PyPI: paramiko</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> <p><strong>Affected:</strong> PyPI: paramiko</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> https://cve.radiocsirt.org/vuln/pysec-2018-19 https://cve.radiocsirt.org/vuln/rhsa-2018:0591 <p>python-paramiko: Authentication bypass in transport.py</p> <p>python-paramiko: Authentication bypass in transport.py</p> https://cve.radiocsirt.org/vuln/rhsa-2018:0591 https://cve.radiocsirt.org/vuln/suse-su-2018:0844-1 <p>Security update for python-paramiko</p> <p>Security update for python-paramiko</p> https://cve.radiocsirt.org/vuln/suse-su-2018:0844-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7750 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: paramiko, Ubuntu:16.04:LTS: paramiko</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: paramiko, Ubuntu:16.04:LTS: paramiko</p> <p>transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7750