Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
simon tatham putty vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2016-2563
Stack-based buffer overflow in the SCP command-line utility in PuTTY prior to 0.67 and KiTTY 0.66.6.3 and previous versions allows remote servers to cause a denial of service (stack memory corruption) or execute arbitrary code via a crafted SCP-SINK file-size response to an SCP d...
9bis Kitty
Simon Tatham Putty
1 EDB exploit
NA
CVE-2013-4208
The rsa_verify function in PuTTY prior to 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Putty Putty 0.50
Putty Putty 0.49
Putty Putty 0.51
Simon Tatham Putty 0.53
Putty Putty 0.55
Simon Tatham Putty
Putty Putty 0.53b
Putty Putty 0.52
Putty Putty 0.48
Putty Putty 0.54
Putty Putty 0.45
Putty Putty 0.46
Putty Putty 0.47
Putty Putty 0.56
Putty Putty 0.57
Putty Putty 0.58
Putty Putty 0.59
Putty Putty 0.60
Putty Putty 0.61
NA
CVE-2013-4206
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY prior to 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing ...
Putty Putty 0.50
Putty Putty 0.49
Putty Putty 0.51
Simon Tatham Putty 0.53
Putty Putty 0.55
Simon Tatham Putty
Putty Putty 0.53b
Putty Putty 0.52
Putty Putty 0.48
Putty Putty 0.54
Putty Putty 0.45
Putty Putty 0.46
Putty Putty 0.47
Putty Putty 0.56
Putty Putty 0.57
Putty Putty 0.58
Putty Putty 0.59
Putty Putty 0.60
Putty Putty 0.61
Putty Putty 2010-06-01
NA
CVE-2013-4207
Buffer overflow in sshbn.c in PuTTY prior to 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum fun...
Putty Putty 0.50
Putty Putty 0.49
Putty Putty 0.51
Simon Tatham Putty 0.53
Putty Putty 0.55
Simon Tatham Putty
Putty Putty 0.53b
Putty Putty 0.52
Putty Putty 0.48
Putty Putty 0.54
Putty Putty 0.45
Putty Putty 0.46
Putty Putty 0.47
Putty Putty 0.56
Putty Putty 0.57
Putty Putty 0.58
Putty Putty 0.59
Putty Putty 0.60
Putty Putty 0.61
Putty Putty 2010-06-01
NA
CVE-2015-5309
Integer overflow in the terminal emulator in PuTTY prior to 0.66 allows remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via an ECH (erase characters) escape sequence with a large parameter value, which triggers a buffer u...
Opensuse Leap 42.1
Opensuse Opensuse 13.1
Opensuse Opensuse 13.2
Simon Tatham Putty
NA
CVE-2015-2157
The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 up to and including 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.
Fedoraproject Fedora 22
Debian Debian Linux 7.0
Fedoraproject Fedora 20
Opensuse Opensuse 13.1
Opensuse Opensuse 13.2
Putty Putty 0.51
Simon Tatham Putty 0.53
Putty Putty 0.55
Putty Putty 0.53b
Putty Putty 0.52
Putty Putty 0.54
Putty Putty 0.56
Putty Putty 0.57
Putty Putty 0.58
Putty Putty 0.59
Putty Putty 0.60
Putty Putty 0.61
Putty Putty 0.62
Putty Putty 0.63
NA
CVE-2013-4852
Integer overflow in PuTTY 0.62 and previous versions, WinSCP prior to 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an...
Winscp Winscp 5.1.1
Winscp Winscp 5.0.6
Winscp Winscp 4.3.2
Winscp Winscp 5.0.9
Winscp Winscp 5.0.7
Winscp Winscp 3.8 Beta
Winscp Winscp 5.0.5
Winscp Winscp 5.1.4
Winscp Winscp 5.1.2
Winscp Winscp 4.2.7
Winscp Winscp
Winscp Winscp 4.0.4
Winscp Winscp 4.3.9
Winscp Winscp 4.2.9
Winscp Winscp 4.3.6
Winscp Winscp 4.3.7
Winscp Winscp 4.2.6
Winscp Winscp 5.0.2
Winscp Winscp 4.2.8
Winscp Winscp 3.8.2
Winscp Winscp 4.4.0
Winscp Winscp 4.3.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started