CVE-2019-9898
Potential recycling of random numbers used in cryptography exists with ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Ubuntu (medium).
Description
Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
Show all 29 entries from 29 sources
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.10 | putty | 0.71-r0 |
| alpine 3.11 | putty | 0.71-r0 |
| alpine 3.12 | putty | 0.71-r0 |
| alpine 3.13 | putty | 0.71-r0 |
| alpine 3.14 | putty | 0.71-r0 |
| alpine 3.15 | putty | 0.71-r0 |
| alpine 3.16 | putty | 0.71-r0 |
| alpine 3.17 | putty | 0.71-r0 |
| alpine 3.18 | putty | 0.71-r0 |
| alpine 3.19 | putty | 0.71-r0 |
| alpine 3.20 | putty | 0.71-r0 |
| alpine 3.21 | putty | 0.71-r0 |
| alpine 3.22 | putty | 0.71-r0 |
| alpine 3.23 | putty | 0.71-r0 |
| alpine 3.24 | putty | 0.71-r0 |
| alpine 3.6 | putty | 0.71-r0 |
| alpine 3.7 | putty | 0.71-r0 |
| alpine 3.8 | putty | 0.71-r0 |
| alpine 3.9 | putty | 0.71-r0 |
| alpine edge | putty | 0.71-r0 |
| debian 11 | putty | 0.70-6 |
| debian 12 | putty | 0.70-6 |
| debian 13 | putty | 0.70-6 |
| debian 14 | putty | 0.70-6 |
| debian 8 | putty | 0.63-10+deb8u2 |
| debian 9 | putty | 0.67-3+deb9u1 |
| echo | putty | 0.70-6 |
| ubuntu 16.04 | putty | 0.67-3+deb9u1build0.16.04.1 |
| ubuntu 16.04-ESM | putty | 0.67-3+deb9u1build0.16.04.1 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html
- http://www.securityfocus.com/bid/107523
- https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/
- https://seclists.org/bugtraq/2019/Apr/6
- https://security.netapp.com/advisory/ntap-20190329-0002/