Race Condition in Paramiko
Moderate severity
GitHub Reviewed
Published
Mar 19, 2022
to the GitHub Advisory Database
•
Updated Sep 3, 2023
Package
Affected versions
>= 2.10.0, < 2.10.1
>= 2.9.0, < 2.9.3
Patched versions
2.10.1
2.9.3
Description
Published by the National Vulnerability Database
Mar 17, 2022
Published to the GitHub Advisory Database
Mar 19, 2022
Reviewed
Mar 29, 2022
Last updated
Sep 3, 2023
Credits
-
ktosiek Analyst
In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
References