CVE-2016-2563 Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service (stack memory corruption) or execute....
CriticalCVSS 9.8
EPSS 32.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service (stack memory corruption) or execute arbitrary code via a crafted SCP-SINK file-size response to an SCP download request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/putty(Debian:12) | < 0.67-1 | 0.67-1 |
| debian/putty(Debian:13) | < 0.67-1 | 0.67-1 |
| debian/putty(Debian:14) | < 0.67-1 | 0.67-1 |
| 9bis kitty | <= 0.66.6.3 | No fix listed |
| simon tatham putty | <= 0.66 | No fix listed |
References
- Debian Security Tracker CVE-2016-2563 vendor-advisory
- bugs.debian.org issue-tracking
- openSUSE-SU-2016:1453 vendor-advisory
- 20160309 CVE-2016-2563 - PuTTY/PSCP <=0.66 buffer overflow - vuln-pscp-sink-sscanf mailing-list
- www.chiark.greenend.org.uk patch
- 84296 vdb-entry
- 1035257 vdb-entry
- github.com vendor-advisory
- GLSA-201606-01 vendor-advisory