{"id":"CVE-2019-9896","aliases":["EUVD-2019-19252","GHSA-x5pv-35h7-pm8q","openSUSE-SU-2019:1113-1","openSUSE-SU-2019:1123-1"],"status":"published","title":"In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting...","description":"In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00759,"percentile":0.55503,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-427"],"published":"2019-03-21T02:31:32Z","modified":"2026-06-17T02:44:48Z","exploits":[{"source":"pocgithub","id":"yasinyilmaz/vuln-chm-hijack","title":"yasinyilmaz/vuln-chm-hijack","date":"2019-05-13","url":"https://github.com/yasinyilmaz/vuln-chm-hijack"}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"putty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71-lp150.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"putty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71-bp150.4.3.1"}]}],"bundled":5}],"products":[{"vendor":"opensuse","product":"backports_sle"},{"vendor":"opensuse","product":"leap"},{"vendor":"putty","product":"putty"}],"references":[{"url":"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190404-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9896"},{"url":"https://github.com/advisories/GHSA-x5pv-35h7-pm8q"},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CA2Q4AK5GQEYMMPK6PCTZM6P7CCCHSSH/#CA2Q4AK5GQEYMMPK6PCTZM6P7CCCHSSH","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1129633","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9898","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LGXV73N3N22CMABVEV6TXW4UHE243SBS/#LGXV73N3N22CMABVEV6TXW4UHE243SBS","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-9896","description":"In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.","status":"published","published":"2019-03-21T02:31:32Z","modified":"2024-08-04T22:01:55.185Z","updated_at":"2026-11-02T14:20:20.397093Z"}],"euvd":[{"id":"EUVD-2019-19252","description":"In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.","status":"published","published":"2019-03-21T02:31:32Z","modified":"2024-08-04T22:01:55Z","updated_at":"2026-11-03T02:40:54.59684Z"}],"ghsa":[{"id":"GHSA-x5pv-35h7-pm8q","title":"In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting...","description":"In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.","status":"published","published":"2022-05-13T01:02:55Z","modified":"2023-02-01T05:02:32Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:49:56.179573Z"}],"nvd":[{"id":"CVE-2019-9896","description":"In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.","status":"published","published":"2019-03-21T16:01:17.813Z","modified":"2026-06-17T02:44:48.54Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"openSUSE-SU-2019:1113-1","title":"Security update for putty","description":"This update for putty fixes the following issues:\n\nUpdate to new upstream release 0.71 [boo#1129633]\n\n* CVE-2019-9894: Fixed a remotely triggerable memory overwrite in RSA key\n  exchange, which can occur before host key verification\n  potential recycling of random numbers used in cryptography.\n* CVE-2019-9895: Fixed a remotely triggerable buffer overflow in any kind of\n  server-to-client forwarding.\n* CVE-2019-9897: Fixed multiple denial-of-service attacks that can be triggered\n  by writing to the terminal.\n* CVE-2019-9898: Fixed potential recycling of random numbers used in cryptography\n* CVE-2019-9896 (Windows only): Fixed hijacking by a malicious help file in the same directory as the executable\n* Major rewrite of the crypto code to remove cache and timing\n  side channels.\n","status":"published","published":"2019-04-02T11:03:54Z","modified":"2026-02-04T03:55:11.287258Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1123-1","title":"Security update for putty","description":"This update for putty fixes the following issues:\n\nUpdate to new upstream release 0.71 [boo#1129633]\n\n* CVE-2019-9894: Fixed a remotely triggerable memory overwrite in RSA key\n  exchange, which can occur before host key verification\n  potential recycling of random numbers used in cryptography.\n* CVE-2019-9895: Fixed a remotely triggerable buffer overflow in any kind of\n  server-to-client forwarding.\n* CVE-2019-9897: Fixed multiple denial-of-service attacks that can be triggered\n  by writing to the terminal.\n* CVE-2019-9898: Fixed potential recycling of random numbers used in cryptography\n* CVE-2019-9896 (Windows only): Fixed hijacking by a malicious help file in the same directory as the executable\n* Major rewrite of the crypto code to remove cache and timing\n  side channels.\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","status":"published","published":"2019-04-02T13:58:36Z","modified":"2026-02-04T03:08:00.63337Z","updated_at":"2026-11-02T16:58:30.784344Z"}]}}