PU
Product
PuTTY
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 4Low 3
Watch
Add PuTTY to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17067 | 9.8 | Oct 1 | PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection Affected: before 0.73 |
| CVE-2019-9898 | 9.8 | Mar 21 | Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71 Affected: before 0.71 |
| CVE-2019-9895 | 9.8 | Mar 21 | In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding Affected: before 0.71 |
| CVE-2017-6542 | 9.8 | Mar 27 | The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging… Affected: through 0.67 |
| CVE-2021-36367 | 8.1 | Jul 9 | PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response Affected: through 0.75 |
| CVE-2019-9896 | 7.8 | Mar 21 | In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable Affected: before 0.71 |
| CVE-2016-6167 | 7.8 | Jan 30 | Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll… Affected: 0.67 |
| CVE-2021-33500 | 7.5 | May 21 | PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY window to change its title repeatedly at high speed, which… Affected: before 0.75 |
| CVE-2019-17069 | 7.5 | Oct 1 | PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message Affected: before 0.73 |
| CVE-2019-17068 | 7.5 | Oct 1 | PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content Affected: before 0.73 |
| CVE-2019-9897 | 7.5 | Mar 21 | Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71 Affected: before 0.71 |
| CVE-2019-9894 | 7.5 | Mar 21 | A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification Affected: before 0.71 |
| CVE-2026-48850 | 5.9 | May 25 | PuTTY 0.72 before 0.84 has a double free in RSA KEX Affected: 0.72 before 0.84 |
| CVE-2024-31497 | 5.9 | Apr 15 | In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60… Affected: 0.68 before 0.81 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 0.80 |
| CVE-2020-14002 | 5.9 | Jun 29 | PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation Affected: 0.68 through 0.73 |
| CVE-2026-48852 | 3.7 | May 25 | PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification Affected: 0.71 before 0.84 |
| CVE-2026-4115 | 3.7 | Mar 22 | PuTTY Ed25519 Signature ecc-ssh.c eddsa_verify signature verification Affected: 0.83 |
| CVE-2026-48851 | 3.1 | May 25 | PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session Affected: 0.77 before 0.84 |
| CVE-2015-2157 | – | Mar 27 | The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain… Affected: 0.51; 0.52; 0.53b; 0.54; 0.55; 0.56; +7 more |
| CVE-2011-4607 | – | Aug 23 | PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to… Affected: 0.59; 0.60; 0.61 |
| CVE-2013-4852 | – | Aug 19 | Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly… Affected: 0.45; 0.46; 0.47; 0.48; 0.49; 0.50; +12 more |
| CVE-2013-4208 | – | Aug 19 | The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory,… Affected: 0.45; 0.46; 0.47; 0.48; 0.49; 0.50; +11 more |
| CVE-2013-4207 | – | Aug 19 | Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during… Affected: 0.45; 0.46; 0.47; 0.48; 0.49; 0.50; +12 more |
| CVE-2013-4206 | – | Aug 19 | Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory… Affected: 0.45; 0.46; 0.47; 0.48; 0.49; 0.50; +12 more |
| CVE-2006-7162 | – | Mar 7 | PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users… Affected: through 0.59 |
| CVE-2005-0467 | – | Feb 21 | Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow… Affected: through 0.56 |
| CVE-2004-1008 | – | Jan 10 | Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen… Affected: 0.48; 0.49; 0.50; 0.51; 0.52; 0.53; +3 more |
| CVE-2004-1440 | – | Dec 31 | Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that… Affected: 0.48; 0.49; 0.50; 0.51; 0.52; 0.53; +2 more |
| CVE-2003-0069 | – | Mar 18 | The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's… Affected: 0.53 |
| CVE-2003-0048 | – | Feb 19 | PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials Affected: 0.48; 0.49; 0.53; 0.53b |
| CVE-2002-1358 | – | Dec 23 | Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute… Affected: 0.48; 0.49; 0.53 |
| CVE-2002-1360 | – | Dec 23 | Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote… Affected: 0.48; 0.49; 0.53 |
| CVE-2002-1357 | – | Dec 23 | Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service… Affected: 0.48; 0.49; 0.53 |
| CVE-2002-1359 | – | Dec 23 | Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary… Affected: 0.48; 0.49; 0.53 |
| CVE-2000-0476 | – | Jun 1 | xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized Affected: 0.48 |
Showing 36