Launchpad.net

CVE 2019-9894

A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.

See the CVE page on Mitre.org for more details.