CVE-2019-9895 Memory corruption in n/a
A buffer overflow in PuTTY's server-to-client forwarding allows remote attackers to execute arbitrary code on Unix systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-9895?
CVE-2019-9895 is a critical memory corruption vulnerability in Fedoraproject Fedora, published on 21 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.
Weakness: CWE-119
Which versions are affected by CVE-2019-9895?
It affects 2 products.
Products include Fedoraproject Fedora, Putty Putty.
How do I fix CVE-2019-9895?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-9895 being exploited?
There is no known exploitation of CVE-2019-9895 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALPINE-CVE-2019-9895, DEBIAN-CVE-2019-9895, GHSA-cgq7-vh72-wc5f, UBUNTU-CVE-2019-9895.