CVE-2019-17067

PuTTY (Windows) before 0.73 is affected. The vulnerability occurs where port-forwarding listening sockets are opened improperly, enabling an attacker to listen on the same port and capture an incoming connection. Root cause: improper handling of port-forwarding sockets. Impact: potential confiden...

CVE-2019-17067

PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection...

CVE-2019-17068

PuTTY prior to 0.73 mishandled the bracketed paste mode protection, potentially allowing a session to be affected by malicious clipboard content. OpenSUSE/Mageia advisories confirm the fix in version 0.73 and reference CVE-2019-17068 (and related CVE-2019-17069). The issue is addressed by upgradi...

CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

CVE-2019-17068

PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content...

PT-2019-14934 · Simon Tatham +1 · Putty +1

Name of the Vulnerable Software and Affected Versions: PuTTY versions prior to 0.73 Description: The issue allows attackers to listen on the same port to steal an incoming connection due to improperly opened port-forwarding listening sockets. Recommendations: For versions prior to 0.73, update to...

CVE-2019-17069

PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...

CVE-2019-17069

PuTTY (SSH client) prior to version 0.73 is affected by CVE-2019-17069, which allows a remote SSH-1 server to cause a denial of service by accessing freed memory via an SSH1_MSG_DISCONNECT. Debian and openSUSE/Mageia advisories indicate updates to PuTTY (0.73 or newer; Debian notes 0.74) fix this...

CVE-2019-17069

PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...

CVE-2019-17069

PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...

PuTTY CVE-2019-17069 Denial of Service Vulnerability

Description PuTTY is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Versions prior to PuTTY 0.73 are vulnerable. Technologies Affected Simon Tatham PuTTY 0.45 Simon Tatham PuTTY 0.46 Simon Tatham PuTTY 0.47 Simon Tatham PuTTY...

OPENSUSE-SU-2019:2017-1 Recommended update for putty

This update for putty fixes the following issues: Update to new upstream release 0.72 boo1144547, boo1144548 Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. Fixed a vulnerability in all the SSH client tools PuTTY, Plink, PSFTP and...

Recommended update for putty (moderate)

openSUSE Security Update: Recommended update for putty Announcement ID: openSUSE-SU-2019:2017-1 Rating: moderate References: 1144547 1144548 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that contains security fixes can now be installed. Description: This...

openSUSE Security Update : putty (openSUSE-2019-1985)

This update for putty fixes the following issues : Update to new upstream release 0.72 boo1144547, boo1144548 - Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. - Fixed a vulnerability in all the SSH client tools PuTTY, Plink, PSFT...

openSUSE: Security Advisory for Recommended (openSUSE-SU-2019:1985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2019:1985-1 Recommended update for putty

This update for putty fixes the following issues: Update to new upstream release 0.72 boo1144547, boo1144548 Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. Fixed a vulnerability in all the SSH client tools PuTTY, Plink, PSFTP and...

Recommended update for putty (moderate)

openSUSE Security Update: Recommended update for putty Announcement ID: openSUSE-SU-2019:1985-1 Rating: moderate References: 1144547 1144548 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that contains security fixes can now be installed. Description: This update for putty fix...

FreeBSD : PuTTY 0.72 -- buffer overflow in SSH-1 and integer overflow in SSH client (5914705c-ab03-11e9-a4f9-080027ac955c)

Simon Tatham reports : Vulnerabilities fixed in this release include : - A malicious SSH-1 server could trigger a buffer overrun by sending extremely short RSA keys, or certain bad packet length fields. Either of these could happen before host key verification, so even if you trust the server you...

PuTTY 0.72 -- buffer overflow in SSH-1 and integer overflow in SSH client

Simon Tatham reports: Vulnerabilities fixed in this release include: A malicious SSH-1 server could trigger a buffer overrun by sending extremely short RSA keys, or certain bad packet length fields. Either of these could happen before host key verification, so even if you trust the server you...