PuTTY 0.48

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*

part: a version: 0.48 update: *

VendorPutty (008a1fed-a309-5584-beef-53a3aa2b274b)
ProductPutty (6ccb8ecc-45e0-571f-81e1-43f27834557c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/putty purl2cpe 2026-06-01 10:15:26.540167
pkg:deb/ubuntu/putty purl2cpe 2026-06-01 10:15:26.540168
pkg:rpm/fedora/putty purl2cpe 2026-06-01 10:15:26.540169
pkg:rpm/opensuse/putty purl2cpe 2026-06-01 10:15:26.540171

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4852 vulnerable 2026-06-08 05:04:49.957598 Details available
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:59:40.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4208 vulnerable 2026-06-08 05:04:34.616716 Details available
The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:38:01.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4207 vulnerable 2026-06-08 05:04:34.615943 Details available
Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:38:01.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4206 vulnerable 2026-06-08 05:04:34.605387 Details available
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:38:01.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1440 vulnerable 2026-06-08 04:47:54.076775 Details available
Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-08T00:53:23.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1008 vulnerable 2026-06-08 04:47:52.292124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0048 vulnerable 2026-06-08 04:47:20.351843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1360 vulnerable 2026-06-08 04:46:23.521285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1359 vulnerable 2026-06-08 04:46:23.520676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1358 vulnerable 2026-06-08 04:46:23.520021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1357 vulnerable 2026-06-08 04:46:23.517767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0476 vulnerable 2026-06-08 04:45:18.106906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.