Skip to content
Fencer Intel
critical 9.8

CVE-2018-7750 in the critical feed json

Paramiko not properly checking authentication before processing other requests

published 2018-03-13 8 y ago modified 2026-06-17 4 mo ago also GHSA-232r-66cg-79px , PYSEC-2018-19 , EUVD-2018-0111

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
27.1%
EPSS 27.1% chance of exploitation in 30 days, percentile 98%
public exploits
1
Exploit-DB

Summary

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

Patch / fix

  • pypi paramiko 1.17.6, 1.18.5, 2.0.8, 2.1.5, 2.2.3, 2.3.2, 2.4.1
  • paramiko paramiko 1.17.6, 1.18.5, 2.0.8, 2.1.5, 2.2.3, 2.3.2
  • paramiko Debian 14, Debian 13, Debian 12 2.4.2-0.1

debian advisories DEBIAN-CVE-2018-7750

  • paramiko Ubuntu 14.04 LTS 1.10.1-1git1ubuntu0.1
  • paramiko Ubuntu 16.04 LTS 1.16.0-1ubuntu0.1

ubuntu advisories UBUNTU-CVE-2018-7750

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • python-paramiko rhev manager 4, RHEL 7 EXTRAS_OTHER, RHEL 7 +4 more 2.1.1-4.el7
  • cfme cloudforms managementengine 5.8 5.8.4.5-1.el7cf
  • ansible cloudforms managementengine 5.9, cloudforms managementengine 5.8 2.4.4.0-1.el7ae
  • cfme-gemset cloudforms managementengine 5.8 5.8.4.5-1.el7cf
  • cfme-appliance cloudforms managementengine 5.8 5.8.4.5-1.el7cf
  • ansible-tower-setup cloudforms managementengine 5.8 3.1.7-1.el7at
  • ansible-tower-server cloudforms managementengine 5.8 3.1.7-1.el7at
  • rh-ruby23-rubygem-json cloudforms managementengine 5.8 2.1.0-1.el7cf

red hat advisories RHSA-2018:1213RHSA-2018:1972RHSA-2018:1274RHSA-2018:1328RHSA-2018:1525RHSA-2018:1125

  • python-paramiko SLE Module for Public Cloud 12 1.18.5-2.12.1
  • python-paramiko SLE Module for Public Cloud 12 1.15.2-2.9.1
  • python-paramiko OpenStack Cloud 7, Enterprise Storage 5, Enterprise Storage 4 2.0.8-3.3.1
  • python-paramiko OpenStack Cloud 6, Enterprise Storage 3 1.15.2-2.6.1

suse advisories SUSE-SU-2018:2777-1SUSE-SU-2018:1971-1SUSE-SU-2018:1850-1SUSE-SU-2018:0873-1SUSE-SU-2018:0844-1

  • python-paramiko openSUSE Tumbleweed 5.0.0-1.1
  • python-paramiko openSUSE Tumbleweed 2.7.2-3.7

opensuse advisories openSUSE-SU-2026:11025-1openSUSE-SU-2024:11249-1

  • py3-paramiko Alpine 3.24, Alpine 3.23, Alpine 3.22 +11 more 2.4.1-r0

alpine advisories ALPINE-CVE-2018-7750

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-7750 updated cvss 9.8

python-paramiko: Authentication bypass in transport.py

  • Red Hat Ceph Storage 2 python-paramiko
    affected: no fix available
  • Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) python-paramiko
    affected: no fix planned “Will not fix”
  • Red Hat OpenShift Enterprise 3 python-paramiko
    affected: no fix available
  • Red Hat OpenStack Platform 8 (Liberty) python-paramiko Red Hat OpenStack Platform 9 (Mitaka) python-paramiko Red Hat OpenStack Platform 10 (Newton) python-paramiko Red Hat OpenStack Platform 11 (Ocata) python-paramiko Red Hat OpenStack Platform 12 (Pike) python-paramiko
    affected: no fix planned “Will not fix”
  • Red Hat OpenStack Platform 13 (Queens) python-paramiko
    affected: no fix available
  • Red Hat Quickstart Cloud Installer 1 python-paramiko
    affected: no fix planned “Will not fix”
  • Red Hat Satellite 6 python-paramiko
    affected: no fix planned “Out of support scope”
  • Red Hat Storage 3 python-paramiko
    affected: no fix available “Fix deferred”
show 13 more
  • Red Hat Storage Console 2 python-paramiko Red Hat Update Infrastructure 3 for Cloud Providers python-paramiko
    affected: no fix planned “Will not fix”
  • Red Hat CloudForms Management Engine 5.8 cfme 5.8.4.5-1.el7cf, ansible 2.4.4.0-1.el7ae, cfme-gemset 5.8.4.5-1.el7cf, python-paramiko 2.1.1-4.el7, cfme-appliance 5.8.4.5-1.el7cf, ansible-tower-setup 3.1.7-1.el7at, +2 more
    fixed: vendor fix RHSA-2018:1972
  • Red Hat CloudForms Management Engine 5.9 cfme 5.9.2.4-1.el7cf, ansible 2.4.4.0-1.el7ae, ansible-tower 3.2.4-1.el7at, cfme-gemset 5.9.2.4-1.el7cf, python-paramiko 2.1.1-4.el7, postgresql96 9.6.6-1PGDG.el7, +20 more
    fixed: vendor fix RHSA-2018:1328
  • Red Hat Ansible Engine 2 for RHEL 7 python-paramiko 2.1.1-4.el7
    fixed: vendor fix RHSA-2018:0646
  • Red Hat Ansible Engine 2.4 for RHEL 7 Server python-paramiko 2.1.1-4.el7
    fixed: vendor fix RHSA-2018:1213
  • Red Hat Enterprise Linux 7 Extras python-paramiko 2.1.1-4.el7
    fixed: vendor fix RHSA-2018:0591
  • Red Hat Enterprise Linux Desktop (v. 6) python-paramiko 1.7.5-4.el6_9 Red Hat Enterprise Linux HPC Node (v. 6) python-paramiko 1.7.5-4.el6_9
    fixed: vendor fix RHSA-2018:1124
  • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) python-paramiko 1.7.5-4.el6_7
    fixed: vendor fix RHSA-2018:1125
  • Red Hat Enterprise Linux Server (v. 6) python-paramiko 1.7.5-4.el6_9
    fixed: vendor fix RHSA-2018:1124
  • Red Hat Enterprise Linux Server AUS (v. 6.4) python-paramiko 1.7.5-4.el6_4 Red Hat Enterprise Linux Server AUS (v. 6.5) python-paramiko 1.7.5-4.el6_5 Red Hat Enterprise Linux Server AUS (v. 6.6) python-paramiko 1.7.5-4.el6_6 Red Hat Enterprise Linux Server EUS (v. 6.7) python-paramiko 1.7.5-4.el6_7 Red Hat Enterprise Linux Server TUS (v. 6.6) python-paramiko 1.7.5-4.el6_6
    fixed: vendor fix RHSA-2018:1125
  • Red Hat Enterprise Linux Workstation (v. 6) python-paramiko 1.7.5-4.el6_9
    fixed: vendor fix RHSA-2018:1124
  • Red Hat Virtualization 4 Hypervisor for RHEL 7 rhvm-appliance 4.2-20180504.0.el7
    fixed: vendor fix RHSA-2018:1525
  • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts python-paramiko 2.1.1-4.el7, rhvm-appliance 4.2-20180504.0.el7 Red Hat Virtualization Manager 4.1 python-paramiko 2.1.1-4.el7
    fixed: vendor fix RHSA-2018:1274

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. Published
  2. First public exploit (EDB-45712)

Exploit prediction

27.11% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-45712 Paramiko 2.4.1 - Authentication Bypass remote, 2018-10-29

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P
GitHub 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
pypi paramiko
>=2.0.0, <2.0.8
>=2.1.0, <2.1.5
>=2.2.0, <2.2.3
>=2.3.0, <2.3.2
>=2.4.0, <2.4.1
>=1.18.0, <1.18.5
<1.17.6
2.0.8
2.1.5
2.2.3
2.3.2
2.4.1
1.18.5
1.17.6

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.