Approved changes feed: RSS · Atom

cpe:2.3:a:putty:putty:2010-06-01:r8967:*:*:development_snapshot:*:*:*

part: a version: 2010-06-01 update: r8967

VendorPutty (008a1fed-a309-5584-beef-53a3aa2b274b)
ProductPutty (6ccb8ecc-45e0-571f-81e1-43f27834557c)
Edition*
Language*
Software editiondevelopment_snapshot
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/putty purl2cpe 2026-06-01 10:15:26.540366
pkg:deb/ubuntu/putty purl2cpe 2026-06-01 10:15:26.540367
pkg:rpm/fedora/putty purl2cpe 2026-06-01 10:15:26.540368
pkg:rpm/opensuse/putty purl2cpe 2026-06-01 10:15:26.540370

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4852 vulnerable 2026-06-08 05:04:49.964444 Details available
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:59:40.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4207 vulnerable 2026-06-08 05:04:34.616178 Details available
Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:38:01.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4206 vulnerable 2026-06-08 05:04:34.613721 Details available
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-08-06T16:38:01.677Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.