Home

CVE-2019-17067

Description

PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.433

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in PuTTY (x64) 0.71Windows
Multiple vulnerabilities affected in PuTTY 0.71Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-310420PuTTY (x64) (0.72)
PATCH-310419PuTTY (0.72)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234