~ / search / GHSA-f8q4-jwww-x3wv

GHSA-f8q4-jwww-x3wv

Race Condition in Paramiko

Source: GitHub Advisory Database (reviewed) High CVE-2022-24302

Packages

EcosystemPackageAffectedFixed in
PyPI paramiko >= 2.10.0, < 2.10.1 2.10.1
PyPI paramiko >= 2.9.0, < 2.9.3 2.9.3

Details

As written in the advisory (Markdown source, shown as plain text).

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

References

External links from the advisory. They lead to third-party sites.