NetSight
IP …
medium4.3

CVE-2013-4207

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properl…

Impact

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.

Affected products

VendorProductAffected versions
PuttyPutty
Versions 0.45, 0.46, 0.47, 0.48, 0.49, 0.50
Simon TathamPutty
through 0.62
Version 0.53

Weakness classification

CWE-119

References