NetSight
IP …
low2.1

CVE-2015-2157

The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows loca…

Impact

The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 7.0
FedoraprojectFedora
Versions 20, 22
OpensuseOpensuse
Versions 13.1, 13.2
PuttyPutty
Versions 0.51, 0.52, 0.53b, 0.54, 0.55, 0.56
Simon TathamPutty
Version 0.53

Weakness classification

CWE-200

References