Read the docs
TI-2018-05593 Aliases CVE-2018-7750GHSA-232r-66cg-79px

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before…

Priority MEDIUM 64CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 18 fixed, 14 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-287.

Summary

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

Why it matters now

EPSS 0.27105 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Partial paramiko (PyPI): 2.0.8, 2.1.5, 2.2.3 +4Red Hat: 9 advisoriesRed Hat: 18 fixed, 14 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—paramiko (PyPI)2.0.0 to before 2.0.82.0.8Patch availableGHSA-232r-66cg-79px
—paramiko (PyPI)2.1.0 to before 2.1.52.1.5Patch availableGHSA-232r-66cg-79px
—paramiko (PyPI)2.2.0 to before 2.2.32.2.3Patch availableGHSA-232r-66cg-79px
—paramiko (PyPI)2.3.0 to before 2.3.22.3.2Patch availableGHSA-232r-66cg-79px
—paramiko (PyPI)2.4.0 to before 2.4.12.4.1Patch availableGHSA-232r-66cg-79px
—paramiko (PyPI)1.18.0 to before 1.18.51.18.5Patch availableGHSA-232r-66cg-79px
—paramiko (PyPI)before 1.17.61.17.6Patch availableGHSA-232r-66cg-79px
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • paramiko (PyPI) Vendor— Affected 2.0.0 to before 2.0.8 Fixed in 2.0.8 Patch available GHSA-232r-66cg-79px
  • paramiko (PyPI) Vendor— Affected 2.1.0 to before 2.1.5 Fixed in 2.1.5 Patch available GHSA-232r-66cg-79px
  • paramiko (PyPI) Vendor— Affected 2.2.0 to before 2.2.3 Fixed in 2.2.3 Patch available GHSA-232r-66cg-79px
  • paramiko (PyPI) Vendor— Affected 2.3.0 to before 2.3.2 Fixed in 2.3.2 Patch available GHSA-232r-66cg-79px
  • paramiko (PyPI) Vendor— Affected 2.4.0 to before 2.4.1 Fixed in 2.4.1 Patch available GHSA-232r-66cg-79px
  • paramiko (PyPI) Vendor— Affected 1.18.0 to before 1.18.5 Fixed in 1.18.5 Patch available GHSA-232r-66cg-79px
  • paramiko (PyPI) Vendor— Affected before 1.17.6 Fixed in 1.17.6 Patch available GHSA-232r-66cg-79px

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*before 1.17.6; 1.18.0 to before 1.18.5; 2.0.0 to before 2.0.8; 2.1.0 to before 2.1.5; 2.2.0 to before 2.2.3; 2.3.0 to before 2.3.2VulnerableParamiko
cpe:2.3:a:paramiko:paramiko:2.4.0:*:*:*:*:*:*:*2.4.0VulnerableParamiko
cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*2.0VulnerableRed Hat
cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*2.4VulnerableRed Hat
cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*4.5VulnerableRed Hat
cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*4.6VulnerableRed Hat
cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:*4.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
  • cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:* Versions before 1.17.6; 1.18.0 to before 1.18.5; 2.0.0 to before 2.0.8; 2.1.0 to before 2.1.5; 2.2.0 to before 2.2.3; 2.3.0 to before 2.3.2 Vulnerable ·Paramiko
  • cpe:2.3:a:paramiko:paramiko:2.4.0:*:*:*:*:*:*:* Versions 2.4.0 Vulnerable ·Paramiko
  • cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:virtualization:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*6.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*6.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian

Remediation

  • Fix · GHSA-232r-66cg-79px paramiko (PyPI) Fixed in 2.0.8 Advisory →
  • Fix · GHSA-232r-66cg-79px paramiko (PyPI) Fixed in 2.1.5 Advisory →
  • Fix · GHSA-232r-66cg-79px paramiko (PyPI) Fixed in 2.2.3 Advisory →
  • Fix · GHSA-232r-66cg-79px paramiko (PyPI) Fixed in 2.3.2 Advisory →
  • Fix · GHSA-232r-66cg-79px paramiko (PyPI) Fixed in 2.4.1 Advisory →
  • Fix · GHSA-232r-66cg-79px paramiko (PyPI) Fixed in 1.18.5 Advisory →
  • Fix · GHSA-232r-66cg-79px paramiko (PyPI) Fixed in 1.17.6 Advisory →

Red Hat 9 advisories

  • RHSA-2018:1972 Released 2018-06-25 · Red Hat rating Important
    Red Hat CloudForms security, bug fix, and enhancement update
    • CloudForms Management Engine 5.8 ansible-2.4.4.0-1.el7ae, ansible-tower-server-3.1.7-1.el7at, ansible-tower-setup-3.1.7-1.el7at +7
  • RHSA-2018:1525 Released 2018-05-15 · Red Hat rating Important
    rhvm-appliance security and enhancement update
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 rhvm-appliance-2:4.2-20180504.0.el7
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts rhvm-appliance-2:4.2-20180504.0.el7
  • RHSA-2018:1328 Released 2018-05-07 · Red Hat rating Important
    CloudForms 4.6.2 bug fix and enhancement update
    • CloudForms Management Engine 5.9 ansible-2.4.4.0-1.el7ae, ansible-doc-2.4.4.0-1.el7ae, ansible-tower-3.2.4-1.el7at +29
Show 6 more Red Hat advisories
  • RHSA-2018:1274 Released 2018-05-02 · Red Hat rating Low
    python-paramiko security, bug fix, and enhancement update
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts python-paramiko-2.1.1-4.el7, python-paramiko-doc-2.1.1-4.el7
    • Red Hat Virtualization Manager 4.1 python-paramiko-2.1.1-4.el7, python-paramiko-doc-2.1.1-4.el7
  • RHSA-2018:1213 Released 2018-04-24 · Red Hat rating Low
    python-paramiko security update
    • Red Hat Ansible Engine 2.4 for RHEL 7 Server python-paramiko-2.1.1-4.el7
  • RHSA-2018:1124 Released 2018-04-12 · Red Hat rating Critical
    python-paramiko security update
    • Red Hat Enterprise Linux Desktop (v. 6) python-paramiko-1.7.5-4.el6_9
    • Red Hat Enterprise Linux HPC Node (v. 6) python-paramiko-1.7.5-4.el6_9
    • Red Hat Enterprise Linux Server (v. 6) python-paramiko-1.7.5-4.el6_9
    • Red Hat Enterprise Linux Workstation (v. 6) python-paramiko-1.7.5-4.el6_9
  • RHSA-2018:1125 Released 2018-04-12 · Red Hat rating Critical
    python-paramiko security update
    • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) python-paramiko-1.7.5-4.el6_7
    • Red Hat Enterprise Linux Server AUS (v. 6.4) python-paramiko-1.7.5-4.el6_4
    • Red Hat Enterprise Linux Server AUS (v. 6.5) python-paramiko-1.7.5-4.el6_5
    • Red Hat Enterprise Linux Server AUS (v. 6.6) python-paramiko-1.7.5-4.el6_6
    • Red Hat Enterprise Linux Server EUS (v. 6.7) python-paramiko-1.7.5-4.el6_7
    • Red Hat Enterprise Linux Server TUS (v. 6.6) python-paramiko-1.7.5-4.el6_6
  • RHSA-2018:0646 Released 2018-04-05 · Red Hat rating Low
    python-paramiko security update
    • Red Hat Ansible Engine 2 for RHEL 7 python-paramiko-2.1.1-4.el7
  • RHSA-2018:0591 Released 2018-03-26 · Red Hat rating Critical
    python-paramiko security and bug fix update
    • Red Hat Enterprise Linux 7 Extras python-paramiko-2.1.1-4.el7, python-paramiko-doc-2.1.1-4.el7

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ceph Storage 2AffectedNo fix yet
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)AffectedNo fix planned: Will not fix
Red Hat OpenShift Enterprise 3AffectedNo fix yet
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 11 (Ocata)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 12 (Pike)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 13 (Queens)AffectedNo fix yet
Red Hat OpenStack Platform 8 (Liberty)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 9 (Mitaka)AffectedNo fix planned: Will not fix
Red Hat Quickstart Cloud Installer 1AffectedNo fix planned: Will not fix
Red Hat Satellite 6AffectedNo fix planned: Out of support scope
Red Hat Storage 3AffectedNo fix yet: Fix deferred
Red Hat Storage Console 2AffectedNo fix planned: Will not fix
Red Hat Update Infrastructure 3 for Cloud ProvidersAffectedNo fix planned: Will not fix
CloudForms Management Engine 5.8Fixed RHSA-2018:1972
CloudForms Management Engine 5.9Fixed RHSA-2018:1328
Red Hat Ansible Engine 2 for RHEL 7Fixed RHSA-2018:0646
Red Hat Ansible Engine 2.4 for RHEL 7 ServerFixed RHSA-2018:1213
Red Hat Enterprise Linux 7 ExtrasFixed RHSA-2018:0591
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2018:1124
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2018:1124
Red Hat Enterprise Linux HPC Node EUS (v. 6.7)Fixed RHSA-2018:1125
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2018:1124
Red Hat Enterprise Linux Server AUS (v. 6.4)Fixed RHSA-2018:1125
Red Hat Enterprise Linux Server AUS (v. 6.5)Fixed RHSA-2018:1125
Red Hat Enterprise Linux Server AUS (v. 6.6)Fixed RHSA-2018:1125
Red Hat Enterprise Linux Server EUS (v. 6.7)Fixed RHSA-2018:1125
Red Hat Enterprise Linux Server TUS (v. 6.6)Fixed RHSA-2018:1125
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2018:1124
Red Hat Virtualization 4 Hypervisor for RHEL 7Fixed RHSA-2018:1525
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2018:1274, RHSA-2018:1525
Red Hat Virtualization Manager 4.1Fixed RHSA-2018:1274

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-7750
  2. 2026-10-03 Alias added: GHSA-232r-66cg-79px

References

Exploit 1

Patch 1

Advisory 17

Other 8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences