CVE-2018-7750: debian debian_linux Improper Authentication
Modified
AliasesALPINE-CVE-2018-7750MGASA-2018-0204SUSE-SU-2018:0844-1SUSE-SU-2018:0873-1SUSE-SU-2018:1850-1SUSE-SU-2018:1971-1SUSE-SU-2018:2777-1GHSA-232r-66cg-79pxPYSEC-2018-19RHSA-2018:0591RHSA-2018:0646RHSA-2018:1124RHSA-2018:1125RHSA-2018:1213RHSA-2018:1274UBUNTU-CVE-2018-7750USN-3603-1DEBIAN-CVE-2018-7750
Published 13-03-2018Last modified 05-08-2024
Vulnerability summary
CVE-2018-7750 is a critical (CVSS 9.8) Improper Authentication vulnerability in debian debian_linux. EPSS estimates a 27.11% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities. 1 public exploit is recorded.
Priority
Prioritisepublic exploit
Public exploit (exploit-database, 29-10-2018)
Source freshness unavailable
How is this decided?CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
27.11%
0%100%
High · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1exploit-database
Advisory lineage
Upstream 0 · Downstream 7 · Related 2Timeline
- 13-03-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
CVSS metrics
9 scores · 6 sources · 4 versionsCritical 9.3Preferred score · OSV · Pypi (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NSourcesSingle source
Critical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · PypiEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Critical 9.8Preferred score · OSV · Red hat (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 2 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
27.11%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
No change 0.00 pp
From 27.11% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundParamiko 2.4.1 - Authentication Bypass
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat11 products
- ansible_engine2.0 | 2.4
- cloudforms4.5 | 4.6
- enterprise_linux_desktop6.0
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_server_aus6.4 | 6.5 | 6.6
Suse6 products
- python-paramiko&distro=SUSE Enterprise Storage 3< 1.15.2-2.6.1
- python-paramiko&distro=SUSE Enterprise Storage 4< 2.0.8-3.3.1
- python-paramiko&distro=SUSE Enterprise Storage 5< 2.0.8-3.3.1
- python-paramiko&distro=SUSE Linux Enterprise Module for Public Cloud 12< 1.15.2-2.9.1 | < 1.18.5-2.12.1
- python-paramiko&distro=SUSE OpenStack Cloud 6< 1.15.2-2.6.1
Debian2 products
- paramiko< 2.4.2-0.1
- debian_linuxEOL8.0 | 9.0
Alpine1 product
- py3-paramiko< 2.4.1-r0
Mageia1 product
- python-paramiko< 2.0.8-1.mga6
Paramiko1 product
- paramiko< 1.17.6 | ≥ 1.18.0, < 1.18.5 | ≥ 2.0.0, < 2.0.8 | ≥ 2.1.0, < 2.1.5 | ≥ 2.2.0, < 2.2.3 | ≥ 2.3.0, < 2.3.2 | 2.4.0
PyPI1 product
- paramiko≥ 2.0.0, < 2.0.8 | ≥ 2.1.0, < 2.1.5 | ≥ 2.2.0, < 2.2.3 | ≥ 2.4.0, < 2.4.1 | ≥ 1.18.0, < 1.18.5 | < 1.17.6 | < fa29bd8446c8eab237f5187d28787727b4610516 | ≥ 2.3.0, < 2.3.2
Ubuntu1 product
- paramiko< 1.10.1-1git1ubuntu0.1 | < 1.16.0-1ubuntu0.1
8 vendors · 24 products
References
57 links- access.redhat.com/errata/RHSA-2018:1124Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
- github.com/paramiko/paramiko/issues/1175X Refsource CONFIRMIssue TrackingThird Party AdvisoryWEBREPORT
- access.redhat.com/errata/RHSA-2018:1125Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
- access.redhat.com/errata/RHSA-2018:1972Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
- access.redhat.com/errata/RHSA-2018:1274Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
lists.debian.org/debian-lts-announce/2018/10/msg00018.htmlMailing ListX Refsource MLISTThird Party AdvisoryWEB- access.redhat.com/errata/RHSA-2018:0646Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
- access.redhat.com/errata/RHSA-2018:1213Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
Show all 57 references
- access.redhat.com/errata/RHSA-2018:1525Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
- access.redhat.com/errata/RHSA-2018:1328Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
- access.redhat.com/errata/RHSA-2018:0591Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
- github.com/paramiko/paramiko/commit/fa29bd8446c8eab237f5187d28787727b4610516X Refsource CONFIRMPatchThird Party AdvisoryWEBFIX
- github.com/paramiko/paramiko/blob/master/sites/www/changelog.rstX Refsource CONFIRMThird Party AdvisoryWEBREPORT
- lists.debian.org/debian-lts-announce/2021/12/msg00025.htmlMailing ListX Refsource MLISTThird Party AdvisoryWEB
- github.com/paramiko/paramikoPACKAGE