Lucene search
MitreCVELIST:CVE-2017-6542HistoryMar 27, 2017 - 5:00 p.m.
CVE-2017-6542
2017-03-2717:00:00
mitre
www.cve.org
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.
References
lists.opensuse.org/opensuse-updates/2017-03/msg00055.html
www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html
www.securityfocus.com/bid/97156
www.securitytracker.com/id/1038067
git.tartarus.org/?p=simon/putty.git%3Ba=commitdiff%3Bh=4ff22863d895cb7ebfced4cf923a012a614adaa8
security.gentoo.org/glsa/201703-03
security.gentoo.org/glsa/201706-09
www.exploit-db.com/exploits/42137/
Related
nessus
nessus
GLSA-201703-03 : PuTTY: Buffer overflow
2017-03-20 00:00:00
FreeBSD : PuTTY -- integer overflow permits memory overwrite by forwarded ssh-agent connections (9b973e97-0a99-11e7-ace7-080027ef73ec)
2017-03-17 00:00:00
openSUSE Security Update : putty (openSUSE-2017-354)
2017-03-20 00:00:00
nvd
nvd
CVE-2017-6542
2017-03-27 17:59:00
zdt
zdt
fedora
fedora
[SECURITY] Fedora 25 Update: putty-0.70-1.fc25
2017-07-19 20:24:43
veracode
veracode
Buffer Overflow
2020-05-10 23:21:49
gentoo
gentoo
PuTTY: Buffer overflow
2017-03-19 00:00:00
FileZilla: Buffer overflow
2017-06-06 00:00:00
openvas
openvas
Fedora Update for putty FEDORA-2017-efdd962fee
2017-07-21 00:00:00
Mageia: Security Advisory (MGASA-2017-0093)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2017-6542
2017-03-27 17:59:00
prion
prion
Buffer overflow
2017-03-27 17:59:00
osv
osv
CVE-2017-6542
2017-03-27 17:59:00
freebsd
freebsd
exploitpack
exploitpack
PuTTY 0.68 - ssh_agent_channel_data Integer Overflow Heap Corruption
2017-06-07 00:00:00
mageia
mageia
Updated putty packages fix security vulnerability
2017-03-28 00:27:33
cve
cve
CVE-2017-6542
2017-03-27 17:59:00
packetstorm
packetstorm
PuTTY ssh_agent_channel_data Integer Overflow
2017-06-08 00:00:00
ubuntucve
ubuntucve
CVE-2017-6542
2017-03-27 00:00:00
alpinelinux
alpinelinux
CVE-2017-6542
2017-03-27 17:59:00
exploitdb
exploitdb