CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

CVE-2019-9898

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2019-9897

PuTTY before version 0.71 is vulnerable to multiple denial-of-service attacks that can be triggered by writing to the terminal (CVE-2019-9897). The connected advisories indicate fixes in upstream PuTTY 0.71 and security updates across distributions (openSUSE/SUSE, Debian), resolving this and rela...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2019-9896

PuTTY (Windows) before version 0.71 is affected by CVE-2019-9896. An attacker could hijack the application by placing a malicious help file in the same directory as the PuTTY executable. OpenSUSE and Nessus references confirm this Windows‑only issue. The remediation is to upgrade to upstream rele...

CVE-2019-9896

In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable...

CVE-2019-9896

In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable...

CVE-2019-9895

In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding...

CVE-2019-9895

CVE-2019-9895 affects PuTTY on Unix systems prior to version 0.71, where there is a remotely triggerable buffer overflow in any kind of server‑to‑client forwarding. The open-source advisories indicate this is addressed by upgrading to PuTTY 0.71 or newer (as reflected in multiple distro advisorie...

CVE-2019-9895

In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding...

CVE-2019-9895

In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding...

CVE-2019-9894

PuTTY (before 0.71) is affected by CVE-2019-9894: a remotely triggerable memory overwrite can occur during RSA key exchange prior to host key verification. Open-source advisories and vendor updates indicate this was addressed in PuTTY 0.71 and newer. The vulnerability enables memory corruption wi...

CVE-2019-9894

A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification...

CVE-2019-9894

A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification...

CVE-2019-9894

A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification...

PuTTY hijacking vulnerability

PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY Windows versions prior to 0.71. A local attacker could exploit the vulnerabili...

PuTTY buffer overflow vulnerability

PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A buffer overflow vulnerability exists in the server-to-client forwarding process in PuTTY Unix versions prior to 0.71....

PuTTY Random Number Reuse Vulnerability

PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A random number reuse vulnerability exists in PuTTY versions prior to 0.71 used in cryptography. An attacker can exploit this vulnerability to potentially recycle random numbers used in...