Information Disclosure

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connec…CVE-2020-14002Putty · 3.1% likely

   CWE-203

2. The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain se…CVE-2015-2157Putty · 0.6% likely

   CWE-200

3. The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, wh…CVE-2013-4208Putty · 0.4% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.