PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade putty | Oct 22, 2020 | Jun 29, 2020 |
| Debian | — | Upgrade putty | Apr 29, 2024 | Jun 29, 2020 |
| Freebsd | — | Upgrade puttyUpgrade putty-gtk2Upgrade putty-nogtk | Jun 29, 2020 | Jun 28, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub