CVE-2021-33500

Katalog CVE

CVSS 7.5 · High EPSS 1,9%

Kerentanan pada putty. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs on Linux or other platforms for similar reasons.

Rincian

Terbit di NVD

21 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.ssh-mitm.at/puttydos.html exploit · advisory pihak ketiga
• https://github.com/ssh-mitm/ssh-mitm-plugins/blob/main/ssh_mitm_plugins/ssh/putty_dos.py exploit · advisory pihak ketiga
• https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html release notes · advisory pihak ketiga