CVE-2013-4206: Buffer Overflow
First published: Mon Aug 19 2013(Updated: )
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Putty Putty | =0.45 | |
| Putty Putty | =0.46 | |
| Putty Putty | =0.47 | |
| Putty Putty | =0.48 | |
| Putty Putty | =0.49 | |
| Putty Putty | =0.50 | |
| Putty Putty | =0.51 | |
| Putty Putty | =0.52 | |
| Putty Putty | =0.53b | |
| Putty Putty | =0.54 | |
| Putty Putty | =0.55 | |
| Putty Putty | =0.56 | |
| Putty Putty | =0.57 | |
| Putty Putty | =0.58 | |
| Putty Putty | =0.59 | |
| Putty Putty | =0.60 | |
| Putty Putty | =0.61 | |
| Putty Putty | =2010-06-01-r8967 | |
| Simon Tatham Putty | <=0.62 | |
| Simon Tatham Putty | =0.53 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html
- http://secunia.com/advisories/54379
- http://secunia.com/advisories/54533
- http://svn.tartarus.org/sgt/putty/sshbn.c?sortby=date&r1=9977&r2=9976&pathrev=9977
- http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modmul.html
- http://www.debian.org/security/2013/dsa-2736
- http://www.openwall.com/lists/oss-security/2013/08/06/11
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/putty
- canonical/putty putty
- version/putty putty/0.45
- version/putty putty/0.46
- version/putty putty/0.47
- version/putty putty/0.48
- version/putty putty/0.49
- version/putty putty/0.50
- version/putty putty/0.51
- version/putty putty/0.52
- version/putty putty/0.53b
- version/putty putty/0.54
- version/putty putty/0.55
- version/putty putty/0.56
- version/putty putty/0.57
- version/putty putty/0.58
- version/putty putty/0.59
- version/putty putty/0.60
- version/putty putty/0.61
- version/putty putty/2010-06-01-r8967
- vendor/simon tatham
- canonical/simon tatham putty
- version/simon tatham putty/0.62
- version/simon tatham putty/0.53