5 matches found
CVE-2023-48795
The SSH transport protocol, including OpenSSH (before 9.6), is vulnerable to the Terrapin attack (CVE-2023-48795). This vulnerability allows remote attackers to bypass integrity checks during the handshake phase by exploiting how the SSH Binary Packet Protocol (BPP) handles sequence numbers. The ...
CVE-2016-2563
The CVE-2016-2563 issue affects PuTTY (pscp) and KiTTY, describing a stack-based buffer overflow in the SCP-SINK handling during SCP downloads. A remote attacker could cause DoS or arbitrary code execution via a crafted SCP-SINK file-size response. Affected: PuTTY older than 0.67 and KiTTY older ...
CVE-2024-25003
KiTTY 0.76.1.13 and earlier is affected by CVE-2024-25003, a stack-based buffer overflow triggered by input to hostname handling. The root cause is insufficient bounds checking and input sanitization, allowing an attacker to overwrite adjacent memory and achieve arbitrary code execution. Multiple...
CVE-2024-25004
KiTTY 0.76.1.13 and earlier are affected by a stack-based buffer overflow caused by insufficient bounds checking and input sanitization (via the username/hostname at line 2600). This vulnerability can allow an attacker to overwrite adjacent memory and achieve arbitrary code execution. Public refe...