CVE-2018-7749
Published: 12 March 2018
The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.
From the Ubuntu Security Team
Matthijs Kooijman discovered that AsyncSSH server did not properly handle authentication under certain conditions. An attacker with a specially crafted client could use this vulnerability to skip authentication of SSH sessions.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
python-asyncssh Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
| bionic |
Released
(1.11.1-1ubuntu0.1~esm1)
Available with Ubuntu Pro |
|
| cosmic |
Ignored
(end of life)
|
|
| disco |
Ignored
(end of life)
|
|
| eoan |
Not vulnerable
(1.12.2-1)
|
|
| focal |
Not vulnerable
(1.12.2-1)
|
|
| groovy |
Not vulnerable
(1.12.2-1)
|
|
| hirsute |
Not vulnerable
(1.12.2-1)
|
|
| impish |
Not vulnerable
(1.12.2-1)
|
|
| jammy |
Not vulnerable
(1.12.2-1)
|
|
| kinetic |
Not vulnerable
(1.12.2-1)
|
|
| lunar |
Not vulnerable
(1.12.2-1)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(1.12.1-1)
|
|
| xenial |
Ignored
(no)
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 9.8 |
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |