Lucene search
+L

590 matches found

OSV
OSV
added 2022/03/21 12:00 a.m.28 views

DLA-2959-1 paramiko - security update

Bulletin has no description...

5.9CVSS6.1AI score0.0208EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/03/21 12:00 a.m.38 views

Debian DLA-2959-1 : paramiko - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2959 advisory. - In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure. CVE-2022-24302...

5.9CVSS6.5AI score0.0208EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/19 12:01 a.m.26 views

GHSA-F8Q4-JWWW-X3WV Race Condition in Paramiko

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

8.2CVSS7.2AI score0.0208EPSS
SaveExploits1References16
Github Security Blog
Github Security Blog
added 2022/03/19 12:01 a.m.42 views

Race Condition in Paramiko

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS2.7AI score0.0208EPSS
SaveExploits1References15Affected Software1
RedhatCVE
RedhatCVE
added 2022/03/18 1:14 p.m.50 views

CVE-2022-24302

A race condition was found in Paramiko. This flaw allows unauthorized information disclosure from an attacker with access to the writeprivatekeyfile...

5.9CVSS4.2AI score0.0208EPSS
SaveExploits1References4
Veracode
Veracode
added 2022/03/18 5:54 a.m.25 views

Information Disclosure

paramiko is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in writeprivatekeyfile parameter in pkey.py which allows a remote attacker to access unauthorized information in system...

5.9CVSS3.7AI score0.0208EPSS
SaveExploits1References11Affected Software2
NVD
NVD
added 2022/03/17 10:15 p.m.17 views

CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS0.0208EPSS
SaveExploits1References8
OSV
OSV
added 2022/03/17 10:15 p.m.4 views

DEBIAN-CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.4AI score0.0208EPSS
SaveExploits1References1
PyPA
PyPA
added 2022/03/17 10:15 p.m.10 views

PYSEC-2022-166

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.6AI score0.0208EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/17 10:15 p.m.28 views

CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.6AI score0.0208EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/17 10:15 p.m.16 views

PYSEC-2022-166

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS7.1AI score0.0208EPSS
SaveExploits1References3
Prion
Prion
added 2022/03/17 10:15 p.m.22 views

Race condition

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

4.3CVSS5.4AI score0.0208EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2022/03/17 10:15 p.m.12 views

UBUNTU-CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.6AI score0.0208EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2022/03/17 9:02 p.m.30 views

CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9AI score0.0208EPSS
SaveExploits1References7
OSV
OSV
added 2022/03/17 9:02 p.m.19 views

CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

6.2AI score
SaveExploits0References10
CVE
CVE
added 2022/03/17 9:02 p.m.379 views

CVE-2022-24302

CVE-2022-24302 describes a race condition in Paramiko's write_private_key_file (between creation and chmod) that could allow unauthorized information disclosure. Affected are Paramiko releases before 2.10.1. Connected sources corroborate the race condition and flag it for Paramiko; mitigation is ...

5.9CVSS5.5AI score0.0208EPSS
SaveExploits1References8Affected Software1
Debian CVE
Debian CVE
added 2022/03/17 9:02 p.m.56 views

CVE-2022-24302

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS5.9AI score0.0208EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/03/17 12:00 a.m.6 views

Paramiko 竞争条件问题漏洞

Paramiko is a pure Python implementation of the SSHv2 protocol. It provides both client and server functionality. A security vulnerability exists in Paramiko versions prior to 2.10.1, which stems from a race condition between creation and chmod in the writeprivatekeyfile function that allows...

5.9CVSS6.5AI score0.0208EPSS
SaveExploits1References22
Positive Technologies
Positive Technologies
added 2022/03/17 12:00 a.m.6 views

PT-2022-2075

Name of the Vulnerable Software and Affected Versions Paramiko versions prior to 2.10.1 Description The issue is related to a race condition in the write private key file function, which could allow unauthorized information disclosure due to synchronization errors when using a shared resource. Th...

8.2CVSS6AI score0.0208EPSS
SaveExploits1References75
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.18 views

Mageia: Security Advisory (MGASA-2018-0204)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.27105EPSS
SaveExploits10References4
Rows per page
Query Builder