CVE-2019-17067
CVE-2019-17067
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.
CVSS 9.8 · Critical · EPSS 1.6%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
putty Ubuntu:16.04:LTS
- Versions
- 0.65-2
- 0.66-1
- 0.66-2
- 0.66-3
- 0.66-4
- 0.67-1
- 0.67-2
- 0.67-3build0.16.04.1
- 0.67-3+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:18.04:LTS
- Versions
- 0.70-1
- 0.70-2
- 0.70-3
- 0.70-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:20.04:LTS
- Versions
- 0.72-1
- 0.73-1
- 0.73-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:22.04:LTS
- Versions
- 0.75-3
- 0.76-1
- 0.76-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:24.04:LTS
- Versions
- 0.78-3
- 0.79-1
- 0.80-1
- 0.80-1build2
- 0.80-1build3
- 0.81-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:25.10
- Versions
- 0.83-2
- 0.83-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.10
- Versions
- 0.83-3build1
- 0.84-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.04:LTS
- Versions
- 0.83-3
- 0.83-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published