CVE-2019-17069: Use After Free
First published: Tue Oct 01 2019(Updated: )
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1_MSG_DISCONNECT message.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PuTTY | <0.73 | |
| openSUSE | =15.0 | |
| openSUSE | =15.1 | |
| NetApp OnCommand Unified Manager for Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00030.html
- https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html
- https://security.netapp.com/advisory/ntap-20191127-0003/
- https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
Frequently Asked Questions
What is CVE-2019-17069?
CVE-2019-17069 is a vulnerability in PuTTY before version 0.73 that allows remote SSH-1 servers to cause a denial of service.
How does CVE-2019-17069 affect PuTTY?
CVE-2019-17069 affects PuTTY versions before 0.73.
What is the severity of CVE-2019-17069?
CVE-2019-17069 has a severity rating of high with a CVSS score of 7.5.
How can CVE-2019-17069 be exploited?
CVE-2019-17069 can be exploited by sending a specially crafted SSH1_MSG_DISCONNECT message to the vulnerable server.
Is there a fix for CVE-2019-17069?
Yes, the fix for CVE-2019-17069 is to update PuTTY to version 0.73 or later.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/putty
- canonical/putty
- vendor/opensuse
- canonical/opensuse
- version/opensuse/15.0
- version/opensuse/15.1
- vendor/netapp
- canonical/netapp oncommand unified manager for windows