CVE-2020-14002

Fixed in a distro release EPSS 3%

PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client).

Published 2020-06-29 · CVE record · OSV

Products: putty, netapp oncommand_unified_manager_core_package, fedoraproject fedora

Distro releases