CVE-2021-33500
CVE-2021-33500
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs on Linux or other platforms for similar reasons.
CVSS 7.5 · High · EPSS 1.9%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
putty Ubuntu:16.04:LTS
- Versions
- 0.65-2
- 0.66-1
- 0.66-2
- 0.66-3
- 0.66-4
- 0.67-1
- 0.67-2
- 0.67-3build0.16.04.1
- 0.67-3+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:18.04:LTS
- Versions
- 0.70-1
- 0.70-2
- 0.70-3
- 0.70-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:20.04:LTS
- Versions
- 0.72-1
- 0.73-1
- 0.73-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:22.04:LTS
- Versions
- 0.75-3
- 0.76-1
- 0.76-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:24.04:LTS
- Versions
- 0.78-3
- 0.79-1
- 0.80-1
- 0.80-1build2
- 0.80-1build3
- 0.81-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:25.10
- Versions
- 0.83-2
- 0.83-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.10
- Versions
- 0.83-3build1
- 0.84-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.04:LTS
- Versions
- 0.83-3
- 0.83-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published