CVE-2011-4607: Putty

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory.

Affected products

• Putty Putty: version 0.59 only; version 0.60 only; version 0.61 only

Published 2013-08-23. Last modified 2026-06-16.