PuTTY SSH Client flaw allows of private keys recovery

The PuTTY Secure Shell (SSH) and Telnet client are impacted by a critical vulnerability that could be exploited to recover private keys. PuTTY tools from 0.68 to 0.80 inclusive are affected by a critical vulnerability, tracked as CVE-2024-31497, that resides in the code that generates signatures from ECDSA private keys which use the NIST P521 curve. […]

breaking news client code critical critical vulnerability cve cve-2024 cve-2024-31497 ecdsa exploited flaw hacking information security news it information security keys pierluigi paganini private private keys putty putty ssh recover recovery security shell signatures ssh telnet tools vulnerability