PT-2019-5479 · Simon Tatham+1 · Putty+1

Publicado 2019-03-21 · Atualizado 2021-07-21 · CVE-2019-9898

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.71

Description The issue is related to the potential recycling of random numbers used in cryptography within PuTTY. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is associated with the use of an insufficiently reliable encryption algorithm.

Recommendations For versions prior to 0.71, update to version 0.71 or later to resolve the issue.

Correção

Use of a Broken Cryptographic Algorithm

Use of Insufficiently Random Values

Enumeração de Fraquezas

CWE-327

CWE-330

Identificadores relacionados

BDU:2020-03218

CVE-2019-9898

DLA-1763-1

DSA-4423-1

MGASA-2019-0153

OPENSUSE-SU-2019:1113-1

OPENSUSE-SU-2019:1123-1

OPENSUSE-SU-2019_1113-1

Produtos afetados

Putty

Suse

Referências · 41

• https://ubuntu.com/security/CVE-2019-9898 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2019:1113-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-9898 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2 · Aviso do Fabricante
• https://bugzilla.suse.com/1129633 · Nota
• https://osv.dev/vulnerability/CVE-2019-9898 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4423-1 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-9894 · Nota
• https://trac.wxwidgets.org/ticket/17942 · Nota
• https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-9898.html · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/LDO3F267P347E6U2IILFCYW7JPTLCCES · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2019-0153 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2019:1123-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-9897 · Nota