CVE-2013-4207
NONE
Published Aug 19, 201312y ago · Modified Jun 16, 20262w ago
Published Aug 19, 2013 12y ago
Last Modified Jun 16, 2026 2w ago
Description
Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety
Affected Products 20
| Vendor | Product | Version | Range |
|---|---|---|---|
| putty | putty | 0.45 | any |
| putty | putty | 0.46 | any |
| putty | putty | 0.47 | any |
| putty | putty | 0.48 | any |
| putty | putty | 0.49 | any |
| putty | putty | 0.50 | any |
| putty | putty | 0.51 | any |
| putty | putty | 0.52 | any |
| putty | putty | 0.53b | any |
| putty | putty | 0.54 | any |
| putty | putty | 0.55 | any |
| putty | putty | 0.56 | any |
| putty | putty | 0.57 | any |
| putty | putty | 0.58 | any |
| putty | putty | 0.59 | any |
| putty | putty | 0.60 | any |
| putty | putty | 0.61 | any |
| putty | putty | 2010-06-01 | any |
| simon_tatham | putty | * | ≤0.62 |
| simon_tatham | putty | 0.53 | any |
References 6
- lists.opensuse.org http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html
- secunia.com http://secunia.com/advisories/54379
- secunia.com http://secunia.com/advisories/54533
- chiark.greenend.org.uk http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html
- debian.org http://www.debian.org/security/2013/dsa-2736
- openwall.com http://www.openwall.com/lists/oss-security/2013/08/06/11
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.