Paramiko not properly checking authentication before processing other requests
Critical severity
GitHub Reviewed
Published
Jul 12, 2018
to the GitHub Advisory Database
•
Updated Sep 5, 2023
Package
Affected versions
>= 2.0.0, < 2.0.8
>= 2.1.0, < 2.1.5
>= 2.2.0, < 2.2.3
>= 2.3.0, < 2.3.2
= 2.4.0
>= 1.18.0, < 1.18.5
< 1.17.6
Patched versions
2.0.8
2.1.5
2.2.3
2.3.2
2.4.1
1.18.5
1.17.6
Description
Published by the National Vulnerability Database
Mar 13, 2018
Published to the GitHub Advisory Database
Jul 12, 2018
Reviewed
Jun 16, 2020
Last updated
Sep 5, 2023
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
References