DSA-5588: -1 putty -- security update
Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol is prone to a prefix truncation attack, known as the Terrapin attack. This attack allows a MITM attacker to effect a limited break of the integrity of the early encrypted SSH transport protocol by sending extra messages prior to the commencement of encryption, and deleting an equal number of consecutive messages immediately after encryption starts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/puttyto a version that resolves this vulnerability.Fixed in 0.78-2+deb12u2Fixed in 0.78-2+deb12u1 - Upgrade
Upgrade
puttyto a version that resolves this vulnerability.Patch DSA-5588-1
Event History
Frequently Asked Questions
What is the severity of DSA-5588?
DSA-5588 is classified as a high severity vulnerability due to its potential to compromise the integrity of SSH connections.
How do I fix DSA-5588?
To fix DSA-5588, update the Putty package to the latest version provided in the Debian security update.
What systems are affected by DSA-5588?
DSA-5588 affects systems running the Debian version of the Putty package, which includes various Debian distributions.
What is the Terrapin attack related to DSA-5588?
The Terrapin attack refers to a prefix truncation vulnerability in the SSH protocol that allows a man-in-the-middle attack to disrupt early encrypted SSH transport.
Is there a public exploit for DSA-5588?
There is currently no public exploit confirmed for DSA-5588, but the vulnerability poses serious security risks and should be addressed promptly.