Known vulnerabilities in PuTTY

Vendor: Simon Tatham

Software: PuTTY

Software CPE: cpe:2.3:a:simon_tatham:putty:*:*:*:*:*:*:*:*

Website: https://www.putty.org/

Total vulnerabilities: 21

Public exploits: 4

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (21)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU88542 - Cryptographic Issues CVE-2024-31497	CWE-310	Medium	Available	No	0.81	15.04.2024	SB2024041563 SB2024041565 SB2024041566 and 9 more
#VU84537 - Inadequate Encryption Strength CVE-2023-48795	CWE-326	Low	Available	No	0.80	19.12.2023	SB2023121903 SB2023121905 SB2023121906 and 343 more
#VU55005 - Insufficient Verification of Data Authenticity CVE-2021-36367	CWE-345	Medium	No	No	0.76	20.07.2021	SB2021072014 SB2021072015 SB2023122405 and 2 more
#VU29487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-14002	CWE-300	Medium	No	No	0.74	02.07.2020	SB2020070225 SB2020090318 SB2020063041 and 3 more
#VU21599 - Permissions, Privileges, and Access Controls CVE-2019-17067	CWE-264	Low	No	No	0.73	07.10.2019	SB2019100715
#VU21598 - Resource Management Errors CVE-2019-17069	CWE-399	Low	No	No	0.73	07.10.2019	SB2019100713 SB2019100714 SB2019100715 and 2 more
#VU21597 - Permissions, Privileges, and Access Controls CVE-2019-17068	CWE-264	Medium	No	No	0.73	07.10.2019	SB2019100713 SB2019100714 SB2019100715 and 2 more
#VU32029 - Memory corruption CVE-2019-9895	CWE-119	High	No	No	0.71	21.03.2019	SB2019032126 SB2019040832 SB2019031826 and 3 more
#VU31143 - Key Management Errors CVE-2019-9894	CWE-320	Medium	No	No	0.71	21.03.2019	SB2019032122 SB2019040831 SB2019031826 and 3 more
#VU31144 - Improper input validation CVE-2019-9897	CWE-20	Medium	No	No	0.71	21.03.2019	SB2019032122 SB2019040834 SB2019031826 and 3 more
#VU31145 - Use of a Broken or Risky Cryptographic Algorithm CVE-2019-9898	CWE-327	High	No	No	0.71	21.03.2019	SB2019032122 SB2019040830 SB2019031826 and 3 more
#VU12366 - Improper input validation	CWE-20	Medium	No	No	-	05.05.2018	SB2018050502
#VU6919 - Heap-based Buffer Overflow CVE-2017-6542	CWE-122	Medium	Available	No	-	06.06.2017	SB2017060604 SB2017060615 SB2017031901 and 3 more
#VU108 - CVE-2016-6167		High	No	No	-	08.07.2016	SB2016070805
#VU32320 - Stack-based buffer overflow CVE-2016-2563	CWE-121	High	Available	No	0.67	08.04.2016	SB2016040808 SB2016031406 SB2016060505 and 2 more
#VU33817 - Improper input validation CVE-2015-5309	CWE-20	Medium	No	No	0.66	07.12.2015	SB2015120702 SB2015120318 SB2016060505 and 7 more
#VU32444 - Exposure of sensitive information to an unauthorized actor CVE-2015-2157	CWE-200	Low	No	No	0.64	27.03.2015	SB2015032701 SB2015031107 SB2015030302 and 3 more
#VU42632 - Memory corruption CVE-2011-4607	CWE-119	Low	No	No	-	23.08.2013	SB2013082002 SB2013082105 SB2014091705 and 1 more
#VU42656 - Divide By Zero CVE-2013-4207	CWE-369	Medium	No	No	-	20.08.2013	SB2013082002 SB2013091502 SB2013081201
#VU42657 - Exposure of sensitive information to an unauthorized actor CVE-2013-4208	CWE-200	Low	No	No	-	20.08.2013	SB2013082002 SB2013091502 SB2013081201

Showing elements 1 - 20 out of 21

Known vulnerabilities in PuTTY

Breakdown by Severity Chart

Vulnerabilities (21)

Please verify you're human