CVE-2019-9898
Potential recycling of random numbers used in cryptography exists with ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
Alle 29 Einträge aus 29 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
| alpine 3.22 | putty | 0.71-r0 |
| alpine 3.23 | putty | 0.71-r0 |
| alpine 3.24 | putty | 0.71-r0 |
| alpine 3.6 | putty | 0.71-r0 |
| alpine 3.7 | putty | 0.71-r0 |
| alpine 3.8 | putty | 0.71-r0 |
| alpine 3.9 | putty | 0.71-r0 |
| alpine edge | putty | 0.71-r0 |
| debian 11 | putty | 0.70-6 |
| debian 12 | putty | 0.70-6 |
| debian 13 | putty | 0.70-6 |
| debian 14 | putty | 0.70-6 |
| debian 8 | putty | 0.63-10+deb8u2 |
| debian 9 | putty | 0.67-3+deb9u1 |
| echo | putty | 0.70-6 |
| ubuntu 16.04 | putty | 0.67-3+deb9u1build0.16.04.1 |
| ubuntu 16.04-ESM | putty | 0.67-3+deb9u1build0.16.04.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html
- http://www.securityfocus.com/bid/107523
- https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/
- https://seclists.org/bugtraq/2019/Apr/6
- https://security.netapp.com/advisory/ntap-20190329-0002/