Overview
- Description
- Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1283B462-042C-4857-A700-4179AAE20E2F"
},
{
"criteria": "cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2791C9DD-F55D-4683-85AF-B6814C34EFBF"
},
{
"criteria": "cpe:2.3:a:putty:putty:0.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D7582C1-AA8E-41E4-9D69-9A18A5B76CB0"
},
{
"criteria": "cpe:2.3:a:putty:putty:0.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC082AE0-C49D-4944-BE76-B751DAD1EF84"
},
{
"criteria": "cpe:2.3:a:putty:putty:0.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23BAD8E4-2D3A-45EE-A25D-77BD698119BB"
},
{
"criteria": "cpe:2.3:a:putty:putty:0.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58BA8E70-9491-4D4F-9182-2F48347BF6FC"
},
{
"criteria": "cpe:2.3:a:putty:putty:0.53b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F7716EC-E0F9-4E50-8351-35D2F248B380"
},
{
"criteria": "cpe:2.3:a:putty:putty:0.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46C2BD4D-9817-459E-ACF4-9C95233200A2"
}
],
"operator": "OR"
}
]
}
]