Security update for putty (moderate)

🗓️ 02 Apr 2019 00:00:00Reported by OpenSuseType

opensuse🔗 lists.opensuse.org👁 167 Views

Putty security update fixes 5 vulnerabilities

Reporter	Title	Published	Views	Family All 102
AlpineLinux	CVE-2019-9894	21 Mar 201902:30	–	alpinelinux
AlpineLinux	CVE-2019-9895	21 Mar 201902:31	–	alpinelinux
AlpineLinux	CVE-2019-9897	21 Mar 201902:31	–	alpinelinux
AlpineLinux	CVE-2019-9898	21 Mar 201902:31	–	alpinelinux
BDU FSTEC	The vulnerability of the PuTTY encryption protection mechanism, related to key management errors, allows a hacker to overwrite files in the system.	9 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PuTTY cryptographic protection mechanism, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	9 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PuTTY encryption protection mechanism, which stems from insufficient input data validation, allows attackers to trigger a service failure.	9 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PuTTY encryption protection tool lies in the use of a less secure encryption algorithm, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	9 Jul 202000:00	–	bdu_fstec
CNVD	PuTTY buffer overflow vulnerability	21 Mar 201900:00	–	cnvd
CNVD	PuTTY hijacking vulnerability	21 Mar 201900:00	–	cnvd

OS	OS Version	Architecture	Package	Package Version	Filename
opensuse backports	15	aarch64	putty-0.71-bp150.4.3.1.aarch64.rpm	0.71	putty
opensuse backports	15	ppc64le	putty-0.71-bp150.4.3.1.ppc64le.rpm	0.71	putty
opensuse backports	15	s390x	putty-0.71-bp150.4.3.1.s390x.rpm	0.71	putty
opensuse backports	15	x86_64	putty-0.71-bp150.4.3.1.x86_64.rpm	0.71	putty

02 Apr 2019 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 39.8

CVSS 3.17.8

EPSS0.03937

putty security update vulnerabilities cryptography denial-of-service buffer overflow remote triggerable memory overwrite side channels opensuse