KLA65599 OSI vulnerability in PuTTY

Information disclosure vulnerability was found in PuTTY. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

oss-security – CVE-2024-31497: Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces in PuTTY Client

Exploitation

Public exploits exist for this vulnerability.

Related products

PuTTY

CVE list

CVE-2024-31497 high

Solution

Update to the latest version

Download PuTTY

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• PuTTY earlier than 0.81