CVE-2019-9898
Potential recycling of random numbers used in cryptography exists with ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media).
Descripción
Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
Mostrar las 29 entradas de 29 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
| alpine 3.22 | putty | 0.71-r0 |
| alpine 3.23 | putty | 0.71-r0 |
| alpine 3.24 | putty | 0.71-r0 |
| alpine 3.6 | putty | 0.71-r0 |
| alpine 3.7 | putty | 0.71-r0 |
| alpine 3.8 | putty | 0.71-r0 |
| alpine 3.9 | putty | 0.71-r0 |
| alpine edge | putty | 0.71-r0 |
| debian 11 | putty | 0.70-6 |
| debian 12 | putty | 0.70-6 |
| debian 13 | putty | 0.70-6 |
| debian 14 | putty | 0.70-6 |
| debian 8 | putty | 0.63-10+deb8u2 |
| debian 9 | putty | 0.67-3+deb9u1 |
| echo | putty | 0.70-6 |
| ubuntu 16.04 | putty | 0.67-3+deb9u1build0.16.04.1 |
| ubuntu 16.04-ESM | putty | 0.67-3+deb9u1build0.16.04.1 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html
- http://www.securityfocus.com/bid/107523
- https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/
- https://seclists.org/bugtraq/2019/Apr/6
- https://security.netapp.com/advisory/ntap-20190329-0002/