CVE-2018-7750: Paramiko SSH Server Authentication Bypass
Summary
CVE-2018-7750: Paramiko not properly checking authentication before processing other requests. Affects paramiko across 7 version ranges.
< 1.17.6
>= 1.18.0, < 1.18.5
>= 2.0.0, < 2.0.8
>= 2.1.0, < 2.1.5
>= 2.2.0, < 2.2.3
>= 2.3.0, < 2.3.2
>= 2.4.0, < 2.4.1
Fixed in 7 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Also tracked for
- py3-paramiko · Alpine:v3.11
The same CVE-2018-7750 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Paramiko is an open-source Python library that implements the SSHv2 protocol for secure remote connections. It provides a high-level API for handling SSH connections and allows users to create SSH servers and clients. Paramiko is widely used in various applications and frameworks for secure communication. However, versions before 2.4.1 are vulnerable to an authentication bypass vulnerability.
Vulnerability Detail
The vulnerability (CVE-2018-7750) in Paramiko SSH server implementation allows an attacker to bypass authentication and gain unauthorized access to the server. The issue arises from a lack of proper authentication checks before processing other requests. An attacker can exploit this vulnerability by sending a specially crafted channel-open request, effectively skipping the authentication step. This can lead to unauthorized access, privilege escalation, and potential compromise of the server.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.17.61.17.6pip install --upgrade "paramiko==1.17.6" -
>= 1.18.0, < 1.18.51.18.5pip install --upgrade "paramiko==1.18.5" -
>= 2.0.0, < 2.0.82.0.8pip install --upgrade "paramiko==2.0.8" -
>= 2.1.0, < 2.1.52.1.5pip install --upgrade "paramiko==2.1.5" -
>= 2.2.0, < 2.2.32.2.3pip install --upgrade "paramiko==2.2.3" -
>= 2.3.0, < 2.3.22.3.2pip install --upgrade "paramiko==2.3.2"
Show all 7 release lines
-
>= 2.4.0, < 2.4.12.4.1pip install --upgrade "paramiko==2.4.1"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading Paramiko to a secure version.
Conclusion
The vulnerability (CVE-2018-7750) in Paramiko SSH server implementation allows an attacker to bypass authentication and gain unauthorized access to the server. It is crucial to upgrade Paramiko to version 2.4.1 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for paramiko →
FAQ
Paramiko is an open-source Python library that implements the SSHv2 protocol for secure remote connections. It is widely used for creating SSH servers and clients.
The vulnerability allows an attacker to bypass authentication and gain unauthorized access to the server. This can lead to potential compromise of the server and unauthorized actions.
To fix this vulnerability, upgrade Paramiko to version 2.4.1 or later. This version includes the necessary fixes to properly check authentication before processing requests.
There is no known workaround for this vulnerability. It is crucial to apply the recommended fix by upgrading Paramiko to a secure version.
You can find more information about this vulnerability in the GitHub Advisory Database: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/07/GHSA-232r-66cg-79px/GHSA-232r-66cg-79px.json
References
Related vulnerabilities
Recent vulnerabilities recorded for paramiko.
