PYSEC-2022-166

🗓️ 17 Mar 2022 22:15:00Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 5 Views

Race condition in Paramiko before 2.10.1 in write_private_key_file could disclose unauthorized information.

Reporter	Title	Published	Views	Family All 121
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS Product	15 Jul 202515:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in paramiko-2.4.2-py2.py3-none-any.whl affects IBM Integrated Analytics System [CVE-2022-24302]	8 Jun 202313:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in paramiko affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2022-24302]	8 May 202312:52	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	17 May 202315:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in paramiko-2.4.2-py2.py3 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0) [CVE-2022-24302]	17 Jul 202314:05	–	ibm
Tenable Nessus	Amazon Linux 2 : python-paramiko (ALASANSIBLE2-2023-002)	27 Sep 202300:00	–	nessus
Tenable Nessus	Debian DLA-2959-1 : paramiko - LTS security update	21 Mar 202200:00	–	nessus

Vulners

Node

pypi paramikoRange2.10.0–2.10.1

Source	Link
paramiko	www.paramiko.org/changelog.html
github	www.github.com/paramiko/paramiko/blob/363a28d94cada17f012c1604a3c99c71a2bda003/paramiko/pkey.py
github	www.github.com/advisories/GHSA-f8q4-jwww-x3wv

17 May 2022 03:06Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

CVSS 3.15.9

EPSS0.0208