Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

putty putty 0.54 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2004-1440
Multiple heap-based buffer overflows in the modpow function in PuTTY prior to 0.55 allow (1) remote malicious users to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the ...
Putty Putty 0.53Putty Putty 0.53bPutty Putty 0.49Putty Putty 0.50Putty Putty 0.51Putty Putty 0.52Putty Putty 0.48Putty Putty 0.54
10
CVSSv2
CVE-2004-1008
Integer signedness error in the ssh2_rdpkt function in PuTTY prior to 0.56 allows remote malicious users to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.
Putty Putty 0.49Putty Putty 0.50Putty Putty 0.51Putty Putty 0.53bPutty Putty 0.54Putty Putty 0.52Putty Putty 0.53Putty Putty 0.48Putty Putty 0.55Tortoisecvs Tortoisecvs 1.8
2.1
CVSSv2
CVE-2013-4208
The rsa_verify function in PuTTY prior to 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Putty Putty 0.54Putty Putty 0.53bSimon Tatham Putty 0.53Putty Putty 0.52Putty Putty 0.61Simon Tatham PuttyPutty Putty 0.60Putty Putty 0.59Putty Putty 0.47Putty Putty 0.46Putty Putty 0.45Putty Putty 0.57Putty Putty 0.55Putty Putty 0.51Putty Putty 0.49Putty Putty 0.58Putty Putty 0.56Putty Putty 0.50Putty Putty 0.48
6.8
CVSSv2
CVE-2013-4206
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY prior to 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing ...
Simon Tatham Putty 0.53Putty Putty 0.52Putty Putty 0.51Putty Putty 0.50Putty Putty 0.61Putty Putty 0.60Putty Putty 0.59Putty Putty 0.58Putty Putty 0.57Putty Putty 0.45Putty Putty 2010-06-01Simon Tatham PuttyPutty Putty 0.55Putty Putty 0.53bPutty Putty 0.49Putty Putty 0.47Putty Putty 0.56Putty Putty 0.54Putty Putty 0.48Putty Putty 0.46
4.3
CVSSv2
CVE-2013-4207
Buffer overflow in sshbn.c in PuTTY prior to 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum fun...
Putty Putty 0.57Putty Putty 0.56Putty Putty 0.55Putty Putty 0.54Putty Putty 0.53bSimon Tatham PuttyPutty Putty 0.49Putty Putty 0.48Putty Putty 0.47Putty Putty 0.46Putty Putty 0.60Putty Putty 0.58Putty Putty 0.52Putty Putty 0.50Putty Putty 0.45Putty Putty 0.61Putty Putty 0.59Simon Tatham Putty 0.53Putty Putty 0.51Putty Putty 2010-06-01
2.1
CVSSv2
CVE-2015-2157
The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 up to and including 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.
Fedoraproject Fedora 20Fedoraproject Fedora 22Debian Debian Linux 7.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Putty Putty 0.54Putty Putty 0.55Putty Putty 0.62Putty Putty 0.63Putty Putty 0.51Putty Putty 0.52Putty Putty 0.58Putty Putty 0.59Putty Putty 0.56Putty Putty 0.57Simon Tatham Putty 0.53Putty Putty 0.53bPutty Putty 0.60Putty Putty 0.61
6.8
CVSSv2
CVE-2013-4852
Integer overflow in PuTTY 0.62 and previous versions, WinSCP prior to 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an...
Winscp Winscp 5.1.4Winscp Winscp 5.1.3Winscp Winscp 5.1.2Winscp Winscp 5.1.1Winscp Winscp 4.3.8Winscp Winscp 4.3.7Winscp Winscp 4.3.6Winscp Winscp 3.7.6Winscp Winscp 5.0.6Winscp Winscp 5.0.5Winscp Winscp 5.0.4Winscp Winscp 5.0.3Winscp Winscp 5.0.2Winscp Winscp 4.2.6Winscp Winscp 4.2.7Winscp Winscp 4.2.8Winscp Winscp 4.2.9Winscp Winscp 5.0.9Winscp Winscp 5.0.7Winscp Winscp 5.0Winscp Winscp 4.3.9Winscp Winscp 3.8.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook