VULNERABILITY INTELLIGENCE
CVE-2008-0299
CVSS score4.3 MEDIUM
EPSS probability1.62%
CISA KEVNot currently listed
Published2008-01-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.