CVE-2026-48852

Mô tả

Tham khảo

• lists.tartarus.org/pipermail/putty-announce/2026/000042.html · Release Notes
• chiark.greenend.org.uk/~sgtatham/putty/wishlist/ecdsa-remotely-triggerable-assertion.html · Patch

Lỗ hổng khác của putty

• CVE-2026-48851THẤP 3.1PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy…
• CVE-2026-48850TRUNG BÌNH 5.9PuTTY 0.72 before 0.84 has a double free in RSA KEX.
• CVE-2026-4115THẤP 3.7A vulnerability was detected in PuTTY 0.83. Affected is the function eddsa_verify of the file crypto/ecc-ssh.c of the component Ed25519 Sign…
• CVE-2024-31497TRUNG BÌNH 5.9In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui…
• CVE-2023-48795TRUNG BÌNH 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas…