OSI vulnerability in PuTTY

Description

Information disclosure vulnerability was found in PuTTY. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

• oss-security – CVE-2024-31497: Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces in PuTTY Client

Exploitation

Public exploits exist for this vulnerability.

Related products

• PuTTY

CVE list

• CVE-2024-31497
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com