Skip to content
OpenAdvisories
Unscored DSA-2736-1 4 CVEs

putty - several

Published Aug 11, 2013 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 putty 0.60+2010-02-20-1+squeeze2
Debian · 7 putty 0.62-9+deb7u1

Vulnerabilities 4

  • Unscored —

    Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a…

  • Unscored —

    Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an i…

  • Unscored —

    The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not fre…

  • Unscored —

    Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH se…