Lucene search

K
fedoraFedoraFEDORA:20E5F20BB21F
HistoryJan 11, 2024 - 2:17 a.m.

[SECURITY] Fedora 38 Update: python-paramiko-3.4.0-1.fc38

2024-01-1102:17:01
lists.fedoraproject.org
16
python
ssh2
secure connections

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

0.965

Percentile

99.6%

Paramiko (a combination of the Esperanto words for “paranoid” and “friend”) is a module for python 2.3 or greater that implements the SSH2 protocol for secu re (encrypted and authenticated) connections to remote machines. Unlike SSL (aka TLS), the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel (this is how sftp works, for example).

OSVersionArchitecturePackageVersionFilename
Fedora38anypython-paramiko< 3.4.0UNKNOWN

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

0.965

Percentile

99.6%