CVE-2019-17067 - PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection

Back Back to CVE browser

CRITICAL

PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection

Published Oct 1, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.63%

Description

PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (2)

https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html
x_refsource_MISCMailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20191127-0003/
x_refsource_CONFIRM

Link	Providers	Tags
https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html		x_refsource_MISCMailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20191127-0003/		x_refsource_CONFIRM