PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PuTTY before 0.73 mishandles the bracketed paste mode protection mechanism, which may allow a session to     be affected by malicious clipboard content. (CVE-2019-17068)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for putty to version 0.73 fixes the following issues :

  - CVE-2019-17068: Fixed the insufficient handling of     terminal escape sequences, that should delimit the     pasted data in bracketed paste mode (boo#1152753).

  - CVE-2019-17069: Fixed a possible information leak caused     by SSH-1 disconnection messages (boo#1152753).

This update for putty to version 0.73 fixes the following issues :

Security issues fixed :

  - CVE-2019-17068: Fixed the insufficient handling of     terminal escape sequences, that should delimit the     pasted data in bracketed paste mode (boo#1152753).

  - CVE-2019-17069: Fixed a possible information leak caused     by SSH-1 disconnection messages (boo#1152753).

ID	Name	Product	Family	Severity
258839	Linux Distros Unpatched Vulnerability : CVE-2019-17068	Nessus	Misc.	high
129705	openSUSE Security Update : putty (openSUSE-2019-2277)	Nessus	SuSE Local Security Checks	high
129704	openSUSE Security Update : putty (openSUSE-2019-2276)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-17068

high

Tenable Plugins

high

high

high