CVE-2013-4206

Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly…

published August 19, 2013

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02475 · 84.4th percentile
Published
2013-08-19T23:00Z
EPSS history
Timeline
  • 19 AUG 23:00Z
    Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly…
    cvelistv5