CVE-2013-4206 in Simontatham and PuTTY Products
Published on August 19, 2013
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.
Products Associated with CVE-2013-4206
stack.watch emails you whenever new vulnerabilities are published in Simontatham Putty or PuTTY. Just hit a watch button to start following.
Exploit Probability
EPSS
1.14%
Percentile
78.18%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.