Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-4207

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.

  • Published: Aug 20, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-4207
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
putty / putty 0.50 0.50.x
putty / putty 0.49 0.49.x
putty / putty 0.51 0.51.x
simon_tatham / putty 0.53 0.53.x
putty / putty 0.55 0.55.x
simon_tatham / putty - 0.62.x
putty / putty 0.53b 0.53b.x
putty / putty 0.52 0.52.x
putty / putty 0.48 0.48.x
putty / putty 0.54 0.54.x
putty / putty 0.45 0.45.x
putty / putty 0.46 0.46.x
putty / putty 0.47 0.47.x
putty / putty 0.56 0.56.x
putty / putty 0.57 0.57.x
putty / putty 0.58 0.58.x
putty / putty 0.59 0.59.x
putty / putty 0.60 0.60.x
putty / putty 0.61 0.61.x
putty / putty 2010-06-01-r8967 2010-06-01-r8967.x