CVEvulnerability

CVE-2008-0299

4.3 MEDIUM Published 2008-01-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-01-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.

Affected configurations

• python software foundation paramiko 1.7.1

References