| Package | Affected versions | Patched versions |
|---|---|---|
| putty | = 0.45= 0.46= 0.47= 0.48= 0.49= 0.50= 0.51= 0.52= 0.53b= 0.54= 0.55= 0.56= 0.57= 0.58= 0.59= 0.60= 0.61= 2010-06-01 | |
| putty | = 0.53≤ 0.62 | |
| winscp | = 3.7.6= 3.8.2= 3.8_beta= 4.0.4= 4.0.5= 4.2.6= 4.2.7= 4.2.8= 4.2.9= 4.3.2= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9= 4.4.0= 5.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.0.6= 5.0.7= 5.0.8= 5.0.9= 5.1= 5.1.1= 5.1.2= 5.1.3= 5.1.4≤ 5.1.5 |
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free