CVE-2013-4852 Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in...
MediumCVSS 6.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/filezilla(Debian:12) | < 3.7.3-1 | 3.7.3-1 |
| debian/filezilla(Debian:13) | < 3.7.3-1 | 3.7.3-1 |
| debian/filezilla(Debian:14) | < 3.7.3-1 | 3.7.3-1 |
| debian/putty(Debian:12) | < 0.63-1 | 0.63-1 |
| debian/putty(Debian:13) | < 0.63-1 | 0.63-1 |
| debian/putty(Debian:14) | < 0.63-1 | 0.63-1 |
| winscp | <= 5.1.5 | No fix listed |
| winscp | = 3.7.6 | No fix listed |
| winscp | = 3.8.2 | No fix listed |
| winscp | = 3.8_beta | No fix listed |
| winscp | = 4.0.4 | No fix listed |
| winscp | = 4.0.5 | No fix listed |
| winscp | = 4.2.6 | No fix listed |
| winscp | = 4.2.7 | No fix listed |
| winscp | = 4.2.8 | No fix listed |
| winscp | = 4.2.9 | No fix listed |
| winscp | = 4.3.2 | No fix listed |
| winscp | = 4.3.4 | No fix listed |
| winscp | = 4.3.5 | No fix listed |
| winscp | = 4.3.6 | No fix listed |
| winscp | = 4.3.7 | No fix listed |
| winscp | = 4.3.8 | No fix listed |
| winscp | = 4.3.9 | No fix listed |
| winscp | = 4.4.0 | No fix listed |
| winscp | = 5.0-beta | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| winscp | = 5.0.1-beta | No fix listed |
| winscp | = 5.0.2-beta | No fix listed |
| winscp | = 5.0.3-beta | No fix listed |
| winscp | = 5.0.4-beta | No fix listed |
| winscp | = 5.0.5-beta | No fix listed |
| winscp | = 5.0.6-beta | No fix listed |
| winscp | = 5.0.7-beta | No fix listed |
| winscp | = 5.0.8-rc | No fix listed |
| winscp | = 5.0.9-rc | No fix listed |
| winscp | = 5.1 | No fix listed |
| winscp | = 5.1.1 | No fix listed |
| winscp | = 5.1.2 | No fix listed |
| winscp | = 5.1.3 | No fix listed |
| winscp | = 5.1.4 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 7.1 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| putty | = 0.45 | No fix listed |
| putty | = 0.46 | No fix listed |
| putty | = 0.47 | No fix listed |
| putty | = 0.48 | No fix listed |
| putty | = 0.49 | No fix listed |
| putty | = 0.50 | No fix listed |
| putty | = 0.51 | No fix listed |
| putty | = 0.52 | No fix listed |
| putty | = 0.53b | No fix listed |
| putty | = 0.54 | No fix listed |
| putty | = 0.55 | No fix listed |
| putty | = 0.56 | No fix listed |
| putty | = 0.57 | No fix listed |
| putty | = 0.58 | No fix listed |
| putty | = 0.59 | No fix listed |
| putty | = 0.60 | No fix listed |
| putty | = 0.61 | No fix listed |
| putty | = 2010-06-01-r8967 | No fix listed |
| simon tatham putty | <= 0.62 | No fix listed |
| simon tatham putty | = 0.53 | No fix listed |
References
- Debian Security Tracker CVE-2013-4852 vendor-advisory
- bugs.debian.org
- openSUSE-SU-2013:1347 vendor-advisory
- openSUSE-SU-2013:1355 vendor-advisory
- 54379 third-party-advisory vendor-advisory
- 54517 third-party-advisory
- 54533 third-party-advisory
- svn.tartarus.org
- winscp.net
- www.chiark.greenend.org.uk vendor-advisory
- DSA-2736 vendor-advisory
- www.search-lab.hu
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking