CVE-2019-9897: High severity Putty PuTTY vulnerability
Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/puttyto a version that resolves this vulnerability.Fixed in 0.70-6Fixed in 0.74-1Fixed in 0.78-2Fixed in 0.79-1 - Upgrade
Upgrade
alpine/puttyto a version that resolves this vulnerability.Fixed in 0.71-r0 - Upgrade
Upgrade
PuTTYto a version that resolves this vulnerability.Fixed in 0.71
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-9897.
What software versions are affected by this vulnerability?
PuTTY versions before 0.71 are affected.
What is the severity of CVE-2019-9897?
The severity of CVE-2019-9897 is high with a severity value of 7.5.
How can I fix the vulnerability CVE-2019-9897?
To fix the vulnerability, you should update PuTTY to version 0.71 or higher, which is not affected.
Where can I find more information about CVE-2019-9897?
You can find more information about CVE-2019-9897 at the following references: [http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html](http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html), [http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html](http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html), [https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html](https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html).