Description
Paramiko Authentication Bypass vulnerability
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 rpm rhel7 | | | 0:2.1.1-9.el7 |
 alpine v3.7 | | =1.10.1-r0 || =1.11.0-r0 || =1.12.0-r0 || =1.14.0-r0 || =1.14.1-r0 || =1.15.1-r0 || =1.15.2-r0 || =1.16.0-r0 || =1.7.7.1-r0 || =1.9.0-r0 || =2.0.1-r1 || =2.0.1-r2 || =2.0.2-r0 || =2.0.2-r1 || =2.0.2-r2 || =2.0.2-r3 || =2.1.2-r0 || =2.2.0-r0 || =2.2.1-r0 || =2.2.1-r1 || =2.3.1-r0 || =2.4.0-r0 || >=0 <2.4.2-r0 | 2.4.2-r0 |
 pypi | | >=2.4.0 <2.4.2 || >=2.3.0 <2.3.3 || >=2.2.0 <2.2.4 || >=2.1.0 <2.1.6 || >=1.5.1 <2.0.9 | 2.4.2, 2.3.3, 2.2.4, 2.1.6, 2.0.9 |
 alpine v3.13 | | =1.10.1-r0 || =1.11.0-r0 || =1.12.0-r0 || =1.14.0-r0 || =1.14.1-r0 || =1.15.1-r0 || =1.15.2-r0 || =1.16.0-r0 || =1.7.7.1-r0 || =1.9.0-r0 || =2.0.1-r1 || =2.0.1-r2 || =2.0.2-r0 || =2.0.2-r1 || =2.0.2-r2 || =2.0.2-r3 || =2.1.2-r0 || =2.2.0-r0 || =2.2.1-r0 || =2.2.1-r1 || =2.3.1-r0 || =2.4.0-r0 || =2.4.1-r0 || >=0 <2.4.2-r0 | 2.4.2-r0 |
 alpine v3.12 | | =1.10.1-r0 || =1.11.0-r0 || =1.12.0-r0 || =1.14.0-r0 || =1.14.1-r0 || =1.15.1-r0 || =1.15.2-r0 || =1.16.0-r0 || =1.7.7.1-r0 || =1.9.0-r0 || =2.0.1-r1 || =2.0.1-r2 || =2.0.2-r0 || =2.0.2-r1 || =2.0.2-r2 || =2.0.2-r3 || =2.1.2-r0 || =2.2.0-r0 || =2.2.1-r0 || =2.2.1-r1 || =2.3.1-r0 || =2.4.0-r0 || =2.4.1-r0 || >=0 <2.4.2-r0 | 2.4.2-r0 |
 alpine v3.8 | | =1.10.1-r0 || =1.11.0-r0 || =1.12.0-r0 || =1.14.0-r0 || =1.14.1-r0 || =1.15.1-r0 || =1.15.2-r0 || =1.16.0-r0 || =1.7.7.1-r0 || =1.9.0-r0 || =2.0.1-r1 || =2.0.1-r2 || =2.0.2-r0 || =2.0.2-r1 || =2.0.2-r2 || =2.0.2-r3 || =2.1.2-r0 || =2.2.0-r0 || =2.2.1-r0 || =2.2.1-r1 || =2.3.1-r0 || =2.4.0-r0 || =2.4.1-r0 || >=0 <2.4.2-r0 | 2.4.2-r0 |
 alpine v3.11 | | =1.10.1-r0 || =1.11.0-r0 || =1.12.0-r0 || =1.14.0-r0 || =1.14.1-r0 || =1.15.1-r0 || =1.15.2-r0 || =1.16.0-r0 || =1.7.7.1-r0 || =1.9.0-r0 || =2.0.1-r1 || =2.0.1-r2 || =2.0.2-r0 || =2.0.2-r1 || =2.0.2-r2 || =2.0.2-r3 || =2.1.2-r0 || =2.2.0-r0 || =2.2.1-r0 || =2.2.1-r1 || =2.3.1-r0 || =2.4.0-r0 || =2.4.1-r0 || >=0 <2.4.2-r0 | 2.4.2-r0 |
 alpine v3.14 | | =1.10.1-r0 || =1.11.0-r0 || =1.12.0-r0 || =1.14.0-r0 || =1.14.1-r0 || =1.15.1-r0 || =1.15.2-r0 || =1.16.0-r0 || =1.7.7.1-r0 || =1.9.0-r0 || =2.0.1-r1 || =2.0.1-r2 || =2.0.2-r0 || =2.0.2-r1 || =2.0.2-r2 || =2.0.2-r3 || =2.1.2-r0 || =2.2.0-r0 || =2.2.1-r0 || =2.2.1-r1 || =2.3.1-r0 || =2.4.0-r0 || =2.4.1-r0 || >=0 <2.4.2-r0 | 2.4.2-r0 |
 debian 13 | | | 2.4.2-0.1 |
 debian 12 | | | 2.4.2-0.1 |