{"url":"http://public2.vulnerablecode.io/api/packages/12144?format=json","purl":"pkg:pypi/paramiko@1.18.1","type":"pypi","namespace":"","name":"paramiko","version":"1.18.1","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.0.9","latest_non_vulnerable_version":"3.4.0","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35270?format=json","vulnerability_id":"VCID-qrh9-bxde-fqau","summary":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","references":[{"reference_url":"https://access.redhat.com/errata/RHBA-2018:3497","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHBA-2018:3497"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3347","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:3347"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3406","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:3406"},{"reference_url":"https://access.redhat.com/errata/RHSA-2018:3505","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2018:3505"},{"reference_url":"https://github.com/advisories/GHSA-f2j6-wrhh-v25m","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-f2j6-wrhh-v25m"},{"reference_url":"https://github.com/paramiko/paramiko","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/paramiko/paramiko"},{"reference_url":"https://github.com/paramiko/paramiko/issues/1283","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/paramiko/paramiko/issues/1283"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2018-69.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2018-69.yaml"},{"reference_url":"https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt","reference_id":"","reference_type":"","scores":[],"url":"https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2021/12/msg00025.html"},{"reference_url":"https://usn.ubuntu.com/3796-1","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3796-1"},{"reference_url":"https://usn.ubuntu.com/3796-1/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3796-1/"},{"reference_url":"https://usn.ubuntu.com/3796-2","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3796-2"},{"reference_url":"https://usn.ubuntu.com/3796-2/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3796-2/"},{"reference_url":"https://usn.ubuntu.com/3796-3","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3796-3"},{"reference_url":"https://usn.ubuntu.com/3796-3/","reference_id":"","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3796-3/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000805","reference_id":"CVE-2018-1000805","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000805"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/12156?format=json","purl":"pkg:pypi/paramiko@2.0.9","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/paramiko@2.0.9"},{"url":"http://public2.vulnerablecode.io/api/packages/56536?format=json","purl":"pkg:pypi/paramiko@2.1.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/paramiko@2.1.6"},{"url":"http://public2.vulnerablecode.io/api/packages/56535?format=json","purl":"pkg:pypi/paramiko@2.2.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/paramiko@2.2.4"},{"url":"http://public2.vulnerablecode.io/api/packages/56534?format=json","purl":"pkg:pypi/paramiko@2.3.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/paramiko@2.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/56533?format=json","purl":"pkg:pypi/paramiko@2.4.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/paramiko@2.4.2"}],"aliases":["CVE-2018-1000805","GHSA-f2j6-wrhh-v25m","PYSEC-2018-69"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qrh9-bxde-fqau"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/paramiko@1.18.1"}