Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py-paramikoUpgrade py3-paramiko | Mar 7, 2019 | Oct 8, 2018 |
| Amazon_linux | — | Upgrade python-paramiko | Oct 25, 2018 | Oct 8, 2018 |
| Centos_linux | — | Upgrade python-paramiko-docUpgrade python-paramiko | Nov 9, 2018 | Oct 8, 2018 |
| Debian | — | Upgrade paramiko | Feb 19, 2019 | Oct 8, 2018 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-paramiko | Dec 31, 2018 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-paramiko | May 7, 2019 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-paramikoUpgrade python2-paramiko | May 27, 2020 | Oct 8, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-paramikoUpgrade python-paramiko | Feb 8, 2021 | Oct 8, 2018 |
| Oracle Solaris | — | Upgrade library/python/lxml-34 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-34 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-35 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-34 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-35 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-34 to version 2.0.9-0.175.3.36.0.16.0 on Solaris 11.3Upgrade library/python/lxml-27 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-27 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-35 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-27 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-35 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-34 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko to version 2.0.9-0.175.3.36.0.16.0 on Solaris 11.3Upgrade library/python/paramiko-27 to version 2.0.9-0.175.3.36.0.16.0 on Solaris 11.3Upgrade library/python/jinja2-27 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4 | Jul 17, 2019 | Oct 8, 2018 |
| Oracle_linux | — | Upgrade python-paramikoUpgrade python-paramiko-doc | Oct 31, 2018 | Sep 7, 2018 |
| Redhat_linux | — | Upgrade python-paramikoUpgrade python-paramiko-doc | Oct 31, 2018 | Oct 8, 2018 |
| Suse | — | Upgrade python-paramikoUpgrade python3-paramikoUpgrade python2-paramikoUpgrade python-paramiko-doc | Feb 5, 2019 | Oct 8, 2018 |
| Ubuntu | — | Upgrade python-paramikoUpgrade python3-paramiko | Oct 23, 2018 | Oct 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub