<\/div>\n

Citrix urges customers to manually address a PuTTY SSH client flaw that could allow attackers to steal a XenCenter admin’s private SSH key.<\/h2>\n\n\n\n

Versions of XenCenter for Citrix Hypervisor 8.2 CU1 LTSR used PuTTY, a third-party component, for SSH connections to guest VMs. However, PuTTY inclusion was deprecated with XenCenter version 8.2.6, and any versions after 8.2.7 will not include PuTTY. <\/p>\n\n\n\n

The security flaw, tracked as CVE-2024-31497<\/a>, affects multiple versions of XenCenter for Citrix Hypervisor 8.2 CU1 LTSR, which includes PuTTY.<\/p>\n\n\n\n

The flaw resides in the code that generates signatures from ECDSA private keys which use the NIST P521 curve. An attacker can exploit the vulnerability to recover NIST P-521 private keys.<\/gwmw><\/gwmw><\/p>\n\n\n\n

“An issue has been reported in versions of PuTTY prior to version 0.81; when used in conjunction with XenCenter, this issue may, in some scenarios, allow an attacker who controls a guest VM to determine the SSH private key of a XenCenter administrator who uses that key to authenticate to that guest VM while using an SSH connection.” reads the advisory<\/a>.<\/em><\/p>\n\n\n\n

The company recommends customers who do not want to use the \u201cOpen SSH Console\u201d functionality to remove the PuTTY component.\u00a0 Customers who wish to use the functionality should replace the PuTTY version installed on their XenCenter system with an updated version (with a version number of at least 0.81).<\/p>\n\n\n\n

The vulnerability CVE-2024-31497<\/a> was discovered by researchers Fabian B\u00e4umer and Marcus Brinkmann from the Ruhr University Bochum. B\u00e4umer explained that the vulnerability stems from the generation of biased ECDSA\u00a0cryptographic nonces, which could allow full secret key recovery.<\/p>\n\n\n\n

\u201cThe PuTTY client and all related components generate heavily biased ECDSA nonces in the case of NIST P-521. To be more precise, the first 9 bits of each ECDSA nonce are zero. This allows for full secret key recovery in roughly 60 signatures by using state-of-the-art techniques. These signatures can either be harvested by a malicious server (man-in-the-middle attacks are not possible given that clients do not transmit their signature in the clear) or from any other source, e.g. signed git commits through forwarded agents.\u201d\u00a0Baumer explained<\/a>. \u201cThe nonce generation for other curves is slightly biased as well. However, the bias is negligible and far from enough to perform lattice-based key recovery attacks (not considering cryptanalytical advancements).\u201d<\/em><\/gwmw><\/p>\n\n\n\n

The following products include an affected PuTTY version and are therefore are also impacted by the flaw:<\/p>\n\n\n\n

\n
• FileZilla (3.24.1 \u2013 3.66.5)<\/li>\n\n\n\n
• WinSCP (5.9.5 \u2013 6.3.2)<\/li>\n\n\n\n
• TortoiseGit (2.4.0.2 \u2013 2.15.0)<\/li>\n\n\n\n
• TortoiseSVN (1.10.0 \u2013 1.14.6)<\/li>\n<\/ul>\n\n\n\n

  The flaw has been fixed in PuTTY 0.81, FileZilla 3.67.0,\u00a0WinSCP 6.3.3, and TortoiseGit 2.15.0.1. TortoiseSVN users are recommended to configure TortoiseSVN to use Plink from the latest PuTTY 0.81 release\u00a0when accessing a SVN repository via SSH until a patch becomes available.<\/gwmw><\/p>\n\n\n\n

  Any product or component using ECDSA NIST-P521 keys impacted by the flaw\u00a0CVE-2024-31497<\/strong><\/a>\u00a0should be deemed compromised. These keys should be revoked by removing them from authorized_keys, GitHub repositories, and any other relevant platforms.<\/gwmw><\/gwmw><\/gwmw><\/p>\n\n\n\n

  Follow me on Twitter: @securityaffairs<\/strong><\/a> and Facebook<\/strong><\/a> and Mastodon<\/a><\/p>\n\n\n\n

  Pierluigi Paganini<\/strong><\/a><\/p>\n\n\n\n

  (<\/strong>SecurityAffairs<\/strong><\/a>\u00a0\u2013<\/strong>\u00a0hacking,\u00a0Citrix)<\/strong><\/p>\n\n\n\n

  <\/gwmw><\/gwmw><\/p>\n","protected":false},"excerpt":{"rendered":"

  Citrix urges customers to manually address a PuTTY SSH client flaw that could allow attackers to steal a XenCenter admin’s private SSH key. Versions of XenCenter for Citrix Hypervisor 8.2 CU1 LTSR used PuTTY, a third-party component, for SSH connections to guest VMs. However, PuTTY inclusion was deprecated with XenCenter version 8.2.6, and any versions […]<\/p>\n","protected":false},"author":1,"featured_media":82191,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3323,55],"tags":[9269,4112,9508,9506,10918,687,9310,841,1533],"class_list":["post-162953","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-breaking-news","category-security","tag-citrix","tag-hacking","tag-hacking-news","tag-information-security-news","tag-it-information-security","tag-pierluigi-paganini","tag-putty","tag-security-affairs","tag-security-news"],"yoast_head":"\n