Lucene search

[email protected]CVE-2013-4206

HistoryAug 19, 2013 - 11:55 p.m.

CVE-2013-4206

2013-08-1923:55:08

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-4206

putty

ssh

buffer underflow

denial of service

memory corruption

code execution

dsa signature

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

JSON

Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.

Affected configurations

NVD

Node

puttyputtyMatch0.45

puttyputtyMatch0.46

puttyputtyMatch0.47

puttyputtyMatch0.48

puttyputtyMatch0.49

puttyputtyMatch0.50

puttyputtyMatch0.51

puttyputtyMatch0.52

puttyputtyMatch0.53b

puttyputtyMatch0.54

puttyputtyMatch0.55

puttyputtyMatch0.56

puttyputtyMatch0.57

puttyputtyMatch0.58

puttyputtyMatch0.59

puttyputtyMatch0.60

puttyputtyMatch0.61

puttyputtyMatch2010-06-01r8967development_snapshot

simon_tathamputtyRange≤0.62

simon_tathamputtyMatch0.53

CPENameOperatorVersion
putty:puttyputtyeq0.45
putty:puttyputtyeq0.46
putty:puttyputtyeq0.47
putty:puttyputtyeq0.48
putty:puttyputtyeq0.49
putty:puttyputtyeq0.50
putty:puttyputtyeq0.51
putty:puttyputtyeq0.52
putty:puttyputtyeq0.53b
putty:puttyputtyeq0.54

CPE	Name	Operator	Version
putty:putty	putty	eq	0.45
putty:putty	putty	eq	0.46
putty:putty	putty	eq	0.47
putty:putty	putty	eq	0.48
putty:putty	putty	eq	0.49
putty:putty	putty	eq	0.50
putty:putty	putty	eq	0.51
putty:putty	putty	eq	0.52
putty:putty	putty	eq	0.53b
putty:putty	putty	eq	0.54