CVE-2019-9895: Buffer Overflow
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/puttyto a version that resolves this vulnerability.Fixed in 0.70-6Fixed in 0.74-1Fixed in 0.78-2Fixed in 0.79-1 - Upgrade
Upgrade
alpine/puttyto a version that resolves this vulnerability.Fixed in 0.71-r0 - Upgrade
Upgrade
PuTTYto a version that resolves this vulnerability.Fixed in 0.71
Event History
Frequently Asked Questions
What is the vulnerability ID for this PuTTY vulnerability?
The vulnerability ID for this PuTTY vulnerability is CVE-2019-9895.
What is the severity of CVE-2019-9895?
The severity of CVE-2019-9895 is critical with a CVSS score of 9.8.
What is the description of CVE-2019-9895?
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.
What software versions are affected by CVE-2019-9895?
PuTTY versions before 0.71 on Unix are affected by CVE-2019-9895.
How can I fix CVE-2019-9895?
Upgrade to PuTTY version 0.71 or later to fix CVE-2019-9895.