DeutschShown in its original language — a full translation is planned for a future version.
PuTTY: Mehrere Schwachstellen
view advisory published 2019-10-01
Ein lokaler Angreifer kann mehrere Schwachstellen in PuTTY ausnutzen, um Informationen offenzulegen oder Sicherheitsmechanismen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-17069US | high7.5 | — | ||
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message. | ||||
| CVE-2019-17068US | high7.5 | — | ||
PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content. | ||||
| CVE-2019-17067US | critical9.8 | — | ||
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan