PRIOn knowledge basePRION:CVE-2013-4207

HistoryAug 19, 2013 - 11:55 p.m.

Buffer overflow

2013-08-1923:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

JSON

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.

CPENameOperatorVersion
puttyeq0.50
puttyeq0.49
puttyeq0.51
puttyeq0.55
puttyeq0.53.98
puttyeq0.52
puttyeq0.48
puttyeq0.54
puttyeq0.45
puttyeq0.46

Name	Operator	Version
putty	eq	0.50
putty	eq	0.49
putty	eq	0.51
putty	eq	0.55
putty	eq	0.53.98
putty	eq	0.52
putty	eq	0.48
putty	eq	0.54
putty	eq	0.45
putty	eq	0.46

Rows per page:

1-10 of 201

References

lists.opensuse.org/opensuse-updates/2013-08/msg00035.html

secunia.com/advisories/54379

secunia.com/advisories/54533

www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html

www.debian.org/security/2013/dsa-2736

www.openwall.com/lists/oss-security/2013/08/06/11