CVE-2019-9895
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer o ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media).
Descripción
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
Mostrar las 29 entradas de 29 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
| alpine 3.22 | putty | 0.71-r0 |
| alpine 3.23 | putty | 0.71-r0 |
| alpine 3.24 | putty | 0.71-r0 |
| alpine 3.6 | putty | 0.71-r0 |
| alpine 3.7 | putty | 0.71-r0 |
| alpine 3.8 | putty | 0.71-r0 |
| alpine 3.9 | putty | 0.71-r0 |
| alpine edge | putty | 0.71-r0 |
| debian 11 | putty | 0.70-6 |
| debian 12 | putty | 0.70-6 |
| debian 13 | putty | 0.70-6 |
| debian 14 | putty | 0.70-6 |
| debian 8 | putty | sin corrección indicada |
| debian 9 | putty | 0.67-3+deb9u1 |
| echo | putty | 0.70-6 |
| ubuntu 16.04 | putty | 0.67-3+deb9u1build0.16.04.1 |
| ubuntu 16.04-ESM | putty | 0.67-3+deb9u1build0.16.04.1 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/
- https://seclists.org/bugtraq/2019/Apr/6
- https://security.netapp.com/advisory/ntap-20190404-0001/
- https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
- https://www.cve.org/CVERecord?id=CVE-2019-9895