PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PuTTY before 0.73 mishandles the bracketed paste mode protection mechanism, which may allow a session to     be affected by malicious clipboard content. (CVE-2019-17068)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to
    be affected by malicious clipboard content. (CVE-2019-17068)

  - PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory
    locations via an SSH1_MSG_DISCONNECT message. (CVE-2019-17069)

This update for putty to version 0.73 fixes the following issues :

  - CVE-2019-17068: Fixed the insufficient handling of     terminal escape sequences, that should delimit the     pasted data in bracketed paste mode (boo#1152753).

  - CVE-2019-17069: Fixed a possible information leak caused     by SSH-1 disconnection messages (boo#1152753).

This update for putty to version 0.73 fixes the following issues :

Security issues fixed :

  - CVE-2019-17068: Fixed the insufficient handling of     terminal escape sequences, that should delimit the     pasted data in bracketed paste mode (boo#1152753).

  - CVE-2019-17069: Fixed a possible information leak caused     by SSH-1 disconnection messages (boo#1152753).

ID	Name	Product	Family	Severity
258839	Linux Distros Unpatched Vulnerability : CVE-2019-17068	Nessus	Misc.	high
406595	Alpine: multiple putty packages: security update to 0.73-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406595	Alpine: multiple putty packages: security update to 0.73-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400474	Alpine: multiple putty packages: security update to 0.71-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400474	Alpine: multiple putty packages: security update to 0.71-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
129705	openSUSE Security Update : putty (openSUSE-2019-2277)	Nessus	SuSE Local Security Checks	high
129704	openSUSE Security Update : putty (openSUSE-2019-2276)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-17068

high

Tenable Plugins

high

high

high

high

high

high

high