Security Advisory

CVE-2013-4206

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-08-19 23:00:00

Last updated 2024-08-06 16:38:01

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.

← Browse all CVEs View on cve.org ↗