In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-python-paramiko-docamazon-linux-ami-2-upgrade-python2-paramiko | Sep 28, 2023 | Mar 17, 2022 | |
| Centos_linux | — | centos-upgrade-ansible-collection-ansible-netcommoncentos-upgrade-ansible-collection-ansible-posixcentos-upgrade-ansible-collection-ansible-utilscentos-upgrade-ovirt-ansible-collectioncentos-upgrade-ovirt-imageio-clientcentos-upgrade-ovirt-imageio-commoncentos-upgrade-ovirt-imageio-common-debuginfocentos-upgrade-ovirt-imageio-debuginfocentos-upgrade-ovirt-imageio-debugsourcecentos-upgrade-python-ovirt-engine-sdk4-debuginfocentos-upgrade-python-ovirt-engine-sdk4-debugsourcecentos-upgrade-python-pycurl-debuginfocentos-upgrade-python-pycurl-debugsourcecentos-upgrade-python3-jmespathcentos-upgrade-python3-netaddrcentos-upgrade-python3-ovirt-engine-sdk4centos-upgrade-python3-ovirt-engine-sdk4-debuginfocentos-upgrade-python3-passlibcentos-upgrade-python3-pycurlcentos-upgrade-python3-pycurl-debuginfocentos-upgrade-python38-jmespathcentos-upgrade-python38-netaddrcentos-upgrade-python38-ovirt-engine-sdk4centos-upgrade-python38-ovirt-engine-sdk4-debuginfocentos-upgrade-python38-ovirt-imageio-clientcentos-upgrade-python38-ovirt-imageio-commoncentos-upgrade-python38-ovirt-imageio-common-debuginfocentos-upgrade-python38-passlibcentos-upgrade-python38-pycurlcentos-upgrade-python38-pycurl-debuginfo | May 27, 2022 | Mar 17, 2022 |
| Debian | debian-upgrade-paramiko | Mar 23, 2022 | Mar 17, 2022 | |
| Dell Powerstore Dsa2023129 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Dell Powerstore Dsa2025182 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Apr 17, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-python-paramiko-helphuawei-euleros-2_0_sp10-upgrade-python-paramiko-help.rpmhuawei-euleros-2_0_sp10-upgrade-python3-paramiko | Jun 14, 2022 | Mar 17, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-python-paramiko | May 25, 2022 | Mar 17, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-python-paramiko | Jun 17, 2022 | Mar 17, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-python2-paramikohuawei-euleros-2_0_sp8-upgrade-python3-paramiko | Jun 22, 2022 | Mar 17, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-python3-paramiko | Jun 16, 2022 | Mar 17, 2022 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-ansible-collection-ansible-netcommonredhat-upgrade-ansible-collection-ansible-posixredhat-upgrade-ansible-collection-ansible-utilsredhat-upgrade-ovirt-ansible-collectionredhat-upgrade-ovirt-imageio-clientredhat-upgrade-ovirt-imageio-commonredhat-upgrade-ovirt-imageio-common-debuginforedhat-upgrade-ovirt-imageio-debuginforedhat-upgrade-ovirt-imageio-debugsourceredhat-upgrade-python-ovirt-engine-sdk4-debuginforedhat-upgrade-python-ovirt-engine-sdk4-debugsourceredhat-upgrade-python-pycurl-debuginforedhat-upgrade-python-pycurl-debugsourceredhat-upgrade-python3-jmespathredhat-upgrade-python3-netaddrredhat-upgrade-python3-ovirt-engine-sdk4redhat-upgrade-python3-ovirt-engine-sdk4-debuginforedhat-upgrade-python3-passlibredhat-upgrade-python3-pycurlredhat-upgrade-python3-pycurl-debuginforedhat-upgrade-python38-jmespathredhat-upgrade-python38-netaddrredhat-upgrade-python38-ovirt-engine-sdk4redhat-upgrade-python38-ovirt-engine-sdk4-debuginforedhat-upgrade-python38-ovirt-imageio-clientredhat-upgrade-python38-ovirt-imageio-commonredhat-upgrade-python38-ovirt-imageio-common-debuginforedhat-upgrade-python38-passlibredhat-upgrade-python38-pycurlredhat-upgrade-python38-pycurl-debuginfo | May 27, 2022 | Mar 17, 2022 | |
| Suse | — | suse-upgrade-python-paramikosuse-upgrade-python-paramiko-docsuse-upgrade-python2-paramikosuse-upgrade-python3-paramiko | Oct 26, 2022 | Mar 17, 2022 |
| Ubuntu | ubuntu-pro-upgrade-paramiko-docubuntu-pro-upgrade-python-paramikoubuntu-pro-upgrade-python3-paramikoubuntu-upgrade-python-paramikoubuntu-upgrade-python3-paramiko | Mar 29, 2022 | Mar 17, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub