Lucene search

K
nvd[email protected]NVD:CVE-2013-4207
HistoryAug 19, 2013 - 11:55 p.m.

CVE-2013-4207

2013-08-1923:55:08
CWE-119
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.

Affected configurations

NVD
Node
puttyputtyMatch0.45
OR
puttyputtyMatch0.46
OR
puttyputtyMatch0.47
OR
puttyputtyMatch0.48
OR
puttyputtyMatch0.49
OR
puttyputtyMatch0.50
OR
puttyputtyMatch0.51
OR
puttyputtyMatch0.52
OR
puttyputtyMatch0.53b
OR
puttyputtyMatch0.54
OR
puttyputtyMatch0.55
OR
puttyputtyMatch0.56
OR
puttyputtyMatch0.57
OR
puttyputtyMatch0.58
OR
puttyputtyMatch0.59
OR
puttyputtyMatch0.60
OR
puttyputtyMatch0.61
OR
puttyputtyMatch2010-06-01r8967development_snapshot
OR
simon_tathamputtyRange≀0.62
OR
simon_tathamputtyMatch0.53

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%