Lucene search
+L

582 matches found

Fedora
Fedora
added 2022/03/27 1:40 a.m.43 views

[SECURITY] Fedora 34 Update: python-paramiko-2.10.3-1.fc34

Paramiko a combination of the Esperanto words for "paranoid" and "friend" is a module for python 2.3 or greater that implements the SSH2 protocol for secu re encrypted and authenticated connections to remote machines. Unlike SSL aka TLS, the SSH2 protocol does not require hierarchical certificate...

5.9CVSS6.4AI score0.0208EPSS
SaveExploits1
Fedora
Fedora
added 2022/03/27 1:18 a.m.31 views

[SECURITY] Fedora 35 Update: python-paramiko-2.10.3-1.fc35

Paramiko a combination of the Esperanto words for "paranoid" and "friend" is a module for python 2.3 or greater that implements the SSH2 protocol for secu re encrypted and authenticated connections to remote machines. Unlike SSL aka TLS, the SSH2 protocol does not require hierarchical certificate...

5.9CVSS6.4AI score0.0208EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/03/27 12:0 a.m.13 views

Fedora: Security Advisory for python-paramiko (FEDORA-2022-bb5c461682)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.9CVSS6.2AI score0.0208EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/03/26 3:51 p.m.36 views

[SECURITY] Fedora 36 Update: python-paramiko-2.10.3-1.fc36

Paramiko a combination of the Esperanto words for "paranoid" and "friend" is a module for python 2.3 or greater that implements the SSH2 protocol for secu re encrypted and authenticated connections to remote machines. Unlike SSL aka TLS, the SSH2 protocol does not require hierarchical certificate...

5.9CVSS6.4AI score0.0208EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/03/22 12:0 a.m.10 views

Debian: Security Advisory (DLA-2959-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.2AI score0.0208EPSS
SaveExploits1References3
Debian
Debian
added 2022/03/21 11:38 a.m.31 views

[SECURITY] [DLA 2959-1] paramiko security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2959-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 21, 2022 https://wiki.debian.org/LTS -...

5.9CVSS6AI score0.0208EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/03/21 12:0 a.m.35 views

Debian DLA-2959-1 : paramiko - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2959 advisory. - In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure. CVE-2022-24302...

5.9CVSS6.5AI score0.0208EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/21 12:0 a.m.28 views

DLA-2959-1 paramiko - security update

Bulletin has no description...

5.9CVSS6.1AI score0.0208EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2022/03/19 12:1 a.m.7 views

logixbase (>=0.1.1 <=1.0.1) potentially affected by CVE-2022-24302 via paramiko (=2.10.0)

paramiko PYPI version =2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - logixbase =0.1.1, =1.0.1 Source cves: CVE-2022-24302 Source advisory: OSV:GHSA-F8Q4-JWWW-X3WV...

5.9CVSS6.5AI score0.0208EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2022/03/19 12:1 a.m.7 views

build-magic (>=0.4.1 <=0.5.1rc0), lemur (>=1.1.0 <=1.2.0) +10 more potentially affected by CVE-2022-24302 via paramiko (>=2.9.1 <=2.9.2)

paramiko PYPI version =2.9.1, =0.4.1, =1.1.0, =0.10.10, =1.0.0, =0.10.3, =0.2.0.1, =0.0.0.dev0, =1.24.0, =1.34.0 - wizardwebssh =1.9.0 Source cves: CVE-2022-24302 Source advisory: OSV:GHSA-F8Q4-JWWW-X3WV...

5.9CVSS6.5AI score0.0208EPSS
SaveExploits1
OSV
OSV
added 2022/03/19 12:1 a.m.4 views

GHSA-F8Q4-JWWW-X3WV Race Condition in Paramiko

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

8.2CVSS7.2AI score0.0208EPSS
SaveExploits1References16
Github Security Blog
Github Security Blog
added 2022/03/19 12:1 a.m.42 views

Race Condition in Paramiko

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS2.7AI score0.0208EPSS
SaveExploits1References15Affected Software1
RedhatCVE
RedhatCVE
added 2022/03/18 1:14 p.m.48 views

CVE-2022-24302

A race condition was found in Paramiko. This flaw allows unauthorized information disclosure from an attacker with access to the writeprivatekeyfile...

5.9CVSS4.2AI score0.0208EPSS
SaveExploits1References4
Veracode
Veracode
added 2022/03/18 5:54 a.m.24 views

Information Disclosure

paramiko is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in writeprivatekeyfile parameter in pkey.py which allows a remote attacker to access unauthorized information in system...

5.9CVSS3.7AI score0.0208EPSS
SaveExploits1References11Affected Software2
NVD
NVD
added 2022/03/17 10:15 p.m.17 views

CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS0.0208EPSS
SaveExploits1References8
OSV
OSV
added 2022/03/17 10:15 p.m.1 views

DEBIAN-CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.4AI score0.0208EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/17 10:15 p.m.21 views

Race condition

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

4.3CVSS5.4AI score0.0208EPSS
SaveExploits1References7Affected Software3
vulnersOsv
vulnersOsv
added 2022/03/17 10:15 p.m.7 views

logixbase (>=0.1.1 <=1.0.1) potentially affected by CVE-2022-24302 via paramiko (=2.10.0)

paramiko PYPI version =2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - logixbase =0.1.1, =1.0.1 Source cves: CVE-2022-24302 Source advisory: OSV:PYSEC-2022-166...

5.9CVSS6.5AI score0.0208EPSS
SaveExploits1
PyPA
PyPA
added 2022/03/17 10:15 p.m.8 views

PYSEC-2022-166

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.6AI score0.0208EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/17 10:15 p.m.24 views

CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.6AI score0.0208EPSS
SaveExploits1References4
Rows per page
Query Builder