CVE:CVE-2022-24302
CNNVD:CNNVD-202203-1604
Paramiko是一个 SSHv2 协议的纯 Python 实现。提供客户端和服务器功能。
Paramiko 2.10.1之前版本 存在安全漏洞，该漏洞源于write_private_key_file函数中的竞争条件（creation and chmod之间）允许未经授权的信息泄露。
solution:Upgrade paramiko paramiko to a higher version than 2.10.1,and avoid the version (,2.10.1); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36