Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
CVE-2024-31497 PuTTY < v0.81
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Duncan Mac Leod
Guru
Guru


Joined: 02 May 2004
Posts: 312
Location: Germany

PostPosted: Tue Apr 16, 2024 10:10 am    Post subject: CVE-2024-31497 PuTTY < v0.81 Reply with quote

In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31497
Back to top
View user's profile Send private message
CaptainBlood
Advocate
Advocate


Joined: 24 Jan 2010
Posts: 3628

PostPosted: Tue Apr 16, 2024 11:00 am    Post subject: Reply with quote

I've just keyworded in my generic /etc/portage/package.accept_keywords as a safety measure.

Thks 4 ur attention, interest & support.
_________________
USE="-* ..." in /etc/portage/make.conf here.
LT: "I've been doing a passable imitation of the Fontana di Trevi, except my medium is mucus. Sooo much mucus. "
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 21651

PostPosted: Tue Apr 16, 2024 3:08 pm    Post subject: Reply with quote

This is reported as <net-misc/putty-0.81: unsafe key generation.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum