0.0004 Low
EPSS
Percentile
5.2%
The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.
www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped-2.html
launchpad.net/bugs/cve/CVE-2015-2157
nvd.nist.gov/vuln/detail/CVE-2015-2157
security-tracker.debian.org/tracker/CVE-2015-2157
www.cve.org/CVERecord?id=CVE-2015-2157