In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python2-paramikoUpgrade python-paramiko-doc | Sep 28, 2023 | Mar 17, 2022 |
| Centos_linux | — | Upgrade python38-pycurlUpgrade python38-ovirt-imageio-common-debuginfoUpgrade python3-ovirt-engine-sdk4Upgrade python-pycurl-debuginfoUpgrade python38-ovirt-engine-sdk4-debuginfoUpgrade python3-passlibUpgrade python-pycurl-debugsourceUpgrade python3-ovirt-engine-sdk4-debuginfoUpgrade python38-jmespathUpgrade python38-pycurl-debuginfoUpgrade python3-netaddrUpgrade ovirt-imageio-debugsourceUpgrade ovirt-imageio-clientUpgrade ansible-collection-ansible-utilsUpgrade ovirt-ansible-collectionUpgrade ovirt-imageio-common-debuginfoUpgrade ansible-collection-ansible-posixUpgrade python38-ovirt-engine-sdk4Upgrade python3-jmespathUpgrade ansible-collection-ansible-netcommonUpgrade python-ovirt-engine-sdk4-debugsourceUpgrade python38-ovirt-imageio-clientUpgrade python38-netaddrUpgrade python3-pycurl-debuginfoUpgrade ovirt-imageio-commonUpgrade python38-passlibUpgrade python38-ovirt-imageio-commonUpgrade python3-pycurlUpgrade python-ovirt-engine-sdk4-debuginfoUpgrade ovirt-imageio-debuginfo | May 27, 2022 | Mar 17, 2022 |
| Debian | — | Upgrade paramiko | Mar 23, 2022 | Mar 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-paramikoUpgrade python-paramiko-help.rpmUpgrade python-paramiko-help | Jun 14, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-paramiko | May 25, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-paramiko | Jun 17, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-paramikoUpgrade python3-paramiko | Jun 22, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-paramiko | Jun 16, 2022 | Mar 17, 2022 |
| Redhat_linux | — | Upgrade python38-ovirt-engine-sdk4-debuginfoUpgrade python38-pycurlUpgrade ansible-collection-ansible-netcommonUpgrade python38-netaddrUpgrade python-ovirt-engine-sdk4-debuginfoUpgrade python3-ovirt-engine-sdk4Upgrade ovirt-imageio-debugsourceUpgrade python-ovirt-engine-sdk4-debugsourceUpgrade python38-jmespathUpgrade python38-pycurl-debuginfoUpgrade python38-ovirt-engine-sdk4Upgrade python-pycurl-debuginfoUpgrade ansible-collection-ansible-utilsUpgrade ansible-collection-ansible-posixUpgrade python3-pycurl-debuginfoUpgrade python3-jmespathUpgrade ovirt-imageio-common-debuginfoUpgrade python-pycurl-debugsourceUpgrade ovirt-imageio-commonUpgrade python38-passlibUpgrade python3-pycurlUpgrade python3-passlibUpgrade python38-ovirt-imageio-common-debuginfoUpgrade ovirt-imageio-clientUpgrade python38-ovirt-imageio-clientNo solution existsUpgrade ovirt-ansible-collectionUpgrade python3-netaddrUpgrade python38-ovirt-imageio-commonUpgrade python3-ovirt-engine-sdk4-debuginfoUpgrade ovirt-imageio-debuginfo | May 27, 2022 | Mar 17, 2022 |
| Suse | — | Upgrade python-paramikoUpgrade python2-paramikoUpgrade python3-paramikoUpgrade python-paramiko-doc | Oct 26, 2022 | Mar 17, 2022 |
| Ubuntu | — | Upgrade python-paramiko (Ubuntu Pro)Upgrade paramiko-doc (Ubuntu Pro)Upgrade python-paramikoUpgrade python3-paramikoUpgrade python3-paramiko (Ubuntu Pro) | Mar 29, 2022 | Mar 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub