In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python2-paramikoUpgrade python-paramiko-doc | Sep 28, 2023 | Mar 17, 2022 |
| Centos_linux | — | Upgrade python3-ovirt-engine-sdk4-debuginfoUpgrade python38-pycurl-debuginfoUpgrade python3-passlibUpgrade python-pycurl-debugsourceUpgrade python3-netaddrUpgrade python38-pycurlUpgrade python3-ovirt-engine-sdk4Upgrade python38-ovirt-imageio-common-debuginfoUpgrade python38-ovirt-engine-sdk4-debuginfoUpgrade python38-jmespathUpgrade python-pycurl-debuginfoUpgrade ovirt-imageio-commonUpgrade python38-netaddrUpgrade python38-ovirt-engine-sdk4Upgrade ansible-collection-ansible-utilsUpgrade ansible-collection-ansible-posixUpgrade python-ovirt-engine-sdk4-debuginfoUpgrade ovirt-imageio-debuginfoUpgrade python3-pycurl-debuginfoUpgrade python38-passlibUpgrade python38-ovirt-imageio-commonUpgrade python3-pycurlUpgrade ovirt-imageio-common-debuginfoUpgrade ovirt-ansible-collectionUpgrade python38-ovirt-imageio-clientUpgrade python-ovirt-engine-sdk4-debugsourceUpgrade ovirt-imageio-debugsourceUpgrade python3-jmespathUpgrade ansible-collection-ansible-netcommonUpgrade ovirt-imageio-client | May 27, 2022 | Mar 17, 2022 |
| Debian | — | Upgrade paramiko | Mar 23, 2022 | Mar 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-paramiko-help.rpmUpgrade python-paramiko-helpUpgrade python3-paramiko | Jun 14, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-paramiko | May 25, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-paramiko | Jun 17, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-paramikoUpgrade python3-paramiko | Jun 22, 2022 | Mar 17, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-paramiko | Jun 16, 2022 | Mar 17, 2022 |
| Redhat_linux | — | Upgrade python-ovirt-engine-sdk4-debugsourceUpgrade ansible-collection-ansible-netcommonUpgrade python-pycurl-debuginfoUpgrade ansible-collection-ansible-posixUpgrade python3-pycurl-debuginfoUpgrade python38-pycurlUpgrade ansible-collection-ansible-utilsUpgrade python-ovirt-engine-sdk4-debuginfoUpgrade python-pycurl-debugsourceUpgrade python38-ovirt-engine-sdk4Upgrade python3-pycurlUpgrade ovirt-imageio-debugsourceUpgrade python3-jmespathUpgrade ovirt-imageio-commonUpgrade ovirt-imageio-common-debuginfoUpgrade python38-passlibUpgrade python3-ovirt-engine-sdk4Upgrade python38-netaddrUpgrade python38-ovirt-engine-sdk4-debuginfoUpgrade python38-pycurl-debuginfoUpgrade python38-jmespathNo solution existsUpgrade ovirt-imageio-debuginfoUpgrade ovirt-ansible-collectionUpgrade python38-ovirt-imageio-common-debuginfoUpgrade ovirt-imageio-clientUpgrade python38-ovirt-imageio-commonUpgrade python3-ovirt-engine-sdk4-debuginfoUpgrade python38-ovirt-imageio-clientUpgrade python3-netaddrUpgrade python3-passlib | May 27, 2022 | Mar 17, 2022 |
| Suse | — | Upgrade python-paramikoUpgrade python2-paramikoUpgrade python3-paramikoUpgrade python-paramiko-doc | Oct 26, 2022 | Mar 17, 2022 |
| Ubuntu | — | Upgrade python3-paramiko (Ubuntu Pro)Upgrade paramiko-doc (Ubuntu Pro)Upgrade python3-paramikoUpgrade python-paramikoUpgrade python-paramiko (Ubuntu Pro) | Mar 29, 2022 | Mar 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub