CVE-2019-17067

PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-10-01

Last modified

2024-08-05

Weaknesses

CWE-770

Affected products

• Putty (Putty)

References

• https://lists.tartarus.org/pipermail/putty-announce/2019/000029.html
• https://security.netapp.com/advisory/ntap-20191127-0003/