590 matches found
CVE-2026-44405
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...
CVE-2026-44405
Paramiko up to 4.0.0 (before commit a4489456b6f65281e172380cc4826cee5e851dbb) permits SHA-1 in rsakey.py. Affected: Paramiko’s RSA key handling. Root cause: use of SHA-1 algorithm. Impact: low (Confidentiality: None, Integrity: Low). Remediation: apply the patch introduced in the a448945 commit (...
PT-2026-37243
Name of the Vulnerable Software and Affected Versions Paramiko versions prior to 4.0.0 a448945 Description The rsakey.py file allows the use of the SHA-1 algorithm, which is a cryptographic hash function that is no longer considered secure against well-funded attackers. Recommendations Update to...
MiracleLinux 7 : python-paramiko-2.1.1-9.el7 (AXSA:2019-3528:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3528:01 advisory. python-paramiko: Authentication bypass in authhandler.py CVE-2018-1000805 Tenable has extracted the preceding description block directly from the MiracleLinu...
MiracleLinux 7 : python-paramiko-2.1.1-4.el7 (AXSA:2018-2636:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2636:01 advisory. python-paramiko: Authentication bypass in transport.py CVE-2018-7750 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 4 : python-paramiko-1.7.5-5.AXS4 (AXSA:2019-3448:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3448:01 advisory. python-paramiko: Authentication bypass in authhandler.py CVE-2018-1000805 Tenable has extracted the preceding description block directly from the MiracleLinu...
MiracleLinux 4 : python-paramiko-1.7.5-4.AXS4 (AXSA:2018-2793:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2793:01 advisory. python-paramiko: Authentication bypass in transport.py CVE-2018-7750 Tenable has extracted the preceding description block directly from the MiracleLinux...
[SECURITY] [DLA 4409-1] paramiko security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4409-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès December 16, 2025 https://wiki.debian.org/LTS -...
Debian: Security Advisory (DLA-4409-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4409-1 paramiko - security update
Bulletin has no description...
Debian dla-4409 : paramiko-doc - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4409 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4409-1 [email protected] https://www.debian.org/lts/security/...
EUVD-2008-0007
Malware in sbrugna...
EUVD-2018-0112
Malware in sbrugna...
EUVD-2022-0192
Malicious code in bioql PyPI...
Astra Linux – Vulnerabilities in libpod, Erlang, Paramiko
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...
Linux Distros Unpatched Vulnerability : CVE-2022-24302
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...
Linux Distros Unpatched Vulnerability : CVE-2018-7750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x...
Security Bulletin: Vulnerability in paramiko affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-48795]
Summary The paramiko package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2023-48795. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH befo...