Security Advisory

CVE-2017-6542

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-27 17:00:00
Last updated 2024-08-05 15:33:20
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.