Cyber Security News
Critical PuTTY Client Vulnerability Lets Attackers Recover Private Keys
A severe vulnerability has been discovered in the PuTTY client and related components, allowing attackers to fully recover NIST P-521 private keys.
Security Affairs
PuTTY SSH Client flaw allows of private keys recovery
The PuTTY Secure Shell (SSH) and Telnet client are impacted by a critical vulnerability that could be exploited to recover private keys.
Security Affairs
Citrix warns customers to update PuTTY version installed on their XenCenter system manually
Citrix urges customers to manually address a PuTTY SSH client flaw that could allow attackers to steal a XenCenter admin's private SSH key.
The Hacker News
Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack
A critical vulnerability in PuTTY, affecting versions 0.68 through 0.80, compromises the security of NIST P-521 private keys.
Bleeping Computer
PuTTY SSH client flaw allows recovery of cryptographic private keys
A vulnerability tracked as CVE-2024-31497 in PuTTY 0.68 through 0.80 could potentially allow attackers with access to 60 cryptographic signatures to recover the private key used for their generation.
SecurityWeek
Critical PuTTY Vulnerability Allows Secret Key Recovery
PuTTY vulnerability CVE-2024-31497 allows attackers to compromise private keys and use them to forge signatures.
Cyber Security News
Citrix Releases Security Update For Critical PuTTY Vulnerability In Hypervisor
Citrix has released a security bulletin detailing a critical vulnerability (CVE-2024-31497) affecting certain versions of their Citrix