CVE-2026-48852
CVE-2026-48852
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.
CVSS 3.7 · Low · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
putty
- Versions
- ≥ 0.71, < 0.84: Affected (custom)
Update to 0.84
putty Debian:12
- Versions
- 0.78-2
- 0.78-2+deb12u1
- 0.78-2+deb12u2
- 0.78-3
- 0.79-1
- 0.80-1
- 0.81-1
- 0.81-2
- 0.81-3
- 0.82-1
- 0.82-2
- 0.83-1
- 0.83-2
- 0.83-3
- 0.84-1
- 0.85-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Debian:13
- Versions
- 0.83-3
- 0.84-1
- 0.85-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Debian:14
- Versions
- 0.83-3
- Affected ranges
- ECOSYSTEM: < 0.84-1
Update to 0.84-1
putty Ubuntu:16.04:LTS
- Versions
- 0.65-2
- 0.66-1
- 0.66-2
- 0.66-3
- 0.66-4
- 0.67-1
- 0.67-2
- 0.67-3build0.16.04.1
- 0.67-3+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:18.04:LTS
- Versions
- 0.70-1
- 0.70-2
- 0.70-3
- 0.70-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:20.04:LTS
- Versions
- 0.72-1
- 0.73-1
- 0.73-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:22.04:LTS
- Versions
- 0.75-3
- 0.76-1
- 0.76-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:24.04:LTS
- Versions
- 0.78-3
- 0.79-1
- 0.80-1
- 0.80-1build2
- 0.80-1build3
- 0.81-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:25.10
- Versions
- 0.83-2
- 0.83-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.10
- Versions
- 0.83-3build1
- 0.84-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
putty Ubuntu:26.04:LTS
- Versions
- 0.83-3
- 0.83-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published