CVE-2019-9895

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES
• seclists.org/bugtraq/2019/Apr/6
• security.netapp.com/advisory/ntap-20190404-0001
• chiark.greenend.org.uk/~sgtatham/putty/changes.html · Third Party Advisory
• debian.org/security/2019/dsa-4423

putty のその他の脆弱性

• CVE-2026-48852低 3.7PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.
• CVE-2026-48851低 3.1PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy…
• CVE-2026-48850中 5.9PuTTY 0.72 before 0.84 has a double free in RSA KEX.
• CVE-2026-4115低 3.7A vulnerability was detected in PuTTY 0.83. Affected is the function eddsa_verify of the file crypto/ecc-ssh.c of the component Ed25519 Sign…
• CVE-2024-31497中 5.9In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui…