CVE-2017-6542 The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect....
CriticalCVSS 9.8
EPSS 21.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/putty(Debian:12) | < 0.67-3 | 0.67-3 |
| debian/putty(Debian:13) | < 0.67-3 | 0.67-3 |
| debian/putty(Debian:14) | < 0.67-3 | 0.67-3 |
| putty | <= 0.67 | No fix listed |
| openSUSE leap | = 42.2 | No fix listed |
| opensuse project leap | = 42.1 | No fix listed |
| alpine/putty(Alpine:v3.2) | < 0.68-r0 | 0.68-r0 |
| alpine/putty(Alpine:v3.3) | < 0.68-r0 | 0.68-r0 |
| alpine/putty(Alpine:v3.4) | < 0.68-r0 | 0.68-r0 |
| alpine/putty(Alpine:v3.5) | < 0.68-r0 | 0.68-r0 |
References
- Debian Security Tracker CVE-2017-6542 vendor-advisory
- bugs.debian.org issue-tracking
- openSUSE-SU-2017:0741 third-party-advisory vendor-advisory
- www.chiark.greenend.org.uk patch vendor-advisory
- 97156 third-party-advisory vdb-entry
- 1038067 vdb-entry
- git.tartarus.org
- GLSA-201703-03 third-party-advisory vdb-entry vendor-advisory
- GLSA-201706-09 vendor-advisory
- 42137 exploit
- security.alpinelinux.org vendor-advisory