putty vulnerabilities (Debian)
29 vulnerabilities.
-
puttyDebian PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. 3.7 Low -
puttyDebian PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but... 3.1 Low -
puttyDebian PuTTY 0.72 before 0.84 has a double free in RSA KEX. 3.7 Low -
puttyDebian PuTTY Ed25519 Signature ecc-ssh.c eddsa_verify signature verification 6.3 Medium -
puttyDebian In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to... 5.9 Medium -
puttyDebian Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
puttyDebian PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a... 8.1 High -
puttyDebian PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the... 5.9 Medium -
puttyDebian PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a... 7.5 High -
puttyDebian PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing... 7.5 High -
puttyDebian Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71. 9.8 Critical -
puttyDebian Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in... 7.5 High -
puttyDebian In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind... 9.8 Critical -
puttyDebian A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before... 7.5 High -
puttyDebian The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have... 9.8 Critical -
puttyDebian Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6... 9.8 Critical -
puttyDebian Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a... 4.3 Medium -
puttyDebian The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not... 2.1 Low -
puttyDebian PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that... 2.1 Low -
puttyDebian Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use... 6.8 Medium -
puttyDebian The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after... 2.1 Low -
puttyDebian Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of... 4.3 Medium -
puttyDebian Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote... 6.8 Medium -
puttyDebian PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys... 1.9 Low -
puttyDebian Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in... 7.5 High -
puttyDebian Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote... 7.5 High -
puttyDebian Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers... 10.0 High -
puttyDebian The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain... 7.5 High -
puttyDebian PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext... 4.6 Medium