CVE-2019-9898

NONE EPSS 89.1%

Published Mar 21, 20197y ago · Modified Jun 17, 20262w ago

Published Mar 21, 2019 7y ago

Last Modified Jun 17, 2026 2w ago

Description

Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.

EPSS Exploit Probability

89.1% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

CWE-330

Vendor	Product	Version	Range
putty	putty	*	<0.71
fedoraproject	fedora	28	any
fedoraproject	fedora	29	any
debian	debian_linux	8.0	any
debian	debian_linux	9.0	any
opensuse	leap	15.0	any
netapp	oncommand_unified_manager	*	any

lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html

Mailing ListThird Party Advisory
lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html

Mailing ListThird Party Advisory
securityfocus.com http://www.securityfocus.com/bid/107523

Third Party AdvisoryVDB Entry
lists.debian.org https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html

Mailing ListThird Party Advisory
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDO3F267P347E6U2IILFCYW7JPTLCCES/
seclists.org https://seclists.org/bugtraq/2019/Apr/6

Mailing ListThird Party Advisory
security.netapp.com https://security.netapp.com/advisory/ntap-20190329-0002/

Broken Link
security.netapp.com https://security.netapp.com/advisory/ntap-20190401-0002/

PatchThird Party Advisory
chiark.greenend.org.uk https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html

Third Party Advisory
debian.org https://www.debian.org/security/2019/dsa-4423

Third Party Advisory

security.netapp.com https://security.netapp.com/advisory/ntap-20190401-0002/

PatchThird Party Advisory