KLA11445 ACE vulnerability in PuTTY

Integer overflow vulnerability was found in PuTTY. Malicious users can exploit this vulnerability remotely to execute arbitrary code and cause denial of service.

Original advisories

PuTTY vulnerability vuln-ech-overflow

Related products

PuTTY

CVE list

CVE-2015-5309 warning

Solution

Update to the latest version

Download PuTTY

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• PuTTY earlier than 0.66