putty: information disclosure
| Package(s): | putty, filezilla | CVE #(s): | CVE-2015-2157 | ||||||||||||||||||||||||||||
| Created: | March 9, 2015 | Updated: | March 29, 2015 | ||||||||||||||||||||||||||||
| Description: | From the Mageia advisory:
PuTTY suite versions 0.51 to 0.63 fail to clear SSH-2 private key information from memory when loading and saving key files to disk, leading to potential disclosure. The issue affects keys stored on disk in encrypted and unencrypted form, and is present in PuTTY, Plink, PSCP, PSFTP, Pageant and PuTTYgen. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||