Lucene search

GoogleOSV:CVE-2019-9895

HistoryMar 21, 2019 - 4:01 p.m.

CVE-2019-9895

2019-03-2116:01:17

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.6%

JSON

In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.

CPENameOperatorVersion
puttyeq0.70-r1
puttyeq0.70-r0
puttyeq0.63-r0
puttyeq0.69-r1
puttyeq0.65-r0
puttyeq0.64-r0
puttyeq0.61-r0
puttyeq0.60-r0
puttyeq0.66-r1
puttyeq0.68-r0

Name	Operator	Version
putty	eq	0.70-r1
putty	eq	0.70-r0
putty	eq	0.63-r0
putty	eq	0.69-r1
putty	eq	0.65-r0
putty	eq	0.64-r0
putty	eq	0.61-r0
putty	eq	0.60-r0
putty	eq	0.66-r1
putty	eq	0.68-r0

Rows per page:

1-10 of 181

References

lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html

lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/

seclists.org/bugtraq/2019/Apr/6

security.netapp.com/advisory/ntap-20190404-0001/

www.chiark.greenend.org.uk/~sgtatham/putty/changes.html

www.debian.org/security/2019/dsa-4423