> ## Content Index
> Fetch the complete content index at: https://www.binarysludge.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# PuTTY Release Fixes "Password Not Wiped From Memory" Bug
- URL: https://www.binarysludge.com/2011/12/11/putty-release-fixes-password-not-wiped-from-memory-bug/
- Published: 2011-12-11T09:00:40.000Z
- Updated: 2015-01-16T18:11:13.000Z
- Author: Andrew Martin
- Tags: PuTTY, security, SSH, windows, #Import 2026-10-22 12:56

![SSH](http://c213.r13.cf3.rackcdn.com/ssh.png "Silly PuTTY")

PuTTY has fixed a vulnerability that could allow malware to read your SSH passwords from memory:

> When PuTTY has sensitive data in memory and has no further need for it, it should wipe the data out of its memory, in case malware later gains access to the PuTTY process or the memory is swapped out to disk or written into a crash dump file. An obvious example of this is the password typed during SSH login; other examples include obsolete session keys, public-key passphrases, and the private halves of public keys.

The bug existed from PuTTY 0.59 to 0.61 inclusive. [Vulnerability report](http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/password-not-wiped.html?ref=binarysludge.com) and [download page](http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html?ref=binarysludge.com).