CVE-2013-4207

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html
http://secunia.com/advisories/54379	Vendor Advisory
http://secunia.com/advisories/54533
http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html	Vendor Advisory
http://www.debian.org/security/2013/dsa-2736
http://www.openwall.com/lists/oss-security/2013/08/06/11

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:putty:putty:0.45:::::::*
	cpe:2.3:a:putty:putty:0.46:::::::*
	cpe:2.3:a:putty:putty:0.47:::::::*
	cpe:2.3:a:putty:putty:0.48:::::::*
	cpe:2.3:a:putty:putty:0.49:::::::*
	cpe:2.3:a:putty:putty:0.50:::::::*
	cpe:2.3:a:putty:putty:0.51:::::::*
	cpe:2.3:a:putty:putty:0.52:::::::*
	cpe:2.3:a:putty:putty:0.53b:::::::*
	cpe:2.3:a:putty:putty:0.54:::::::*
	cpe:2.3:a:putty:putty:0.55:::::::*
	cpe:2.3:a:putty:putty:0.56:::::::*
	cpe:2.3:a:putty:putty:0.57:::::::*
	cpe:2.3:a:putty:putty:0.58:::::::*
	cpe:2.3:a:putty:putty:0.59:::::::*
	cpe:2.3:a:putty:putty:0.60:::::::*
	cpe:2.3:a:putty:putty:0.61:::::::*
	cpe:2.3:a:putty:putty:2010-06-01:r8967:::development_snapshot:::*
	cpe:2.3:a:simon_tatham:putty::::::::
	cpe:2.3:a:simon_tatham:putty:0.53:::::::*

History

No history.

Information

Published : 2013-08-19 23:55

Updated : 2021-08-06 16:58

NVD link : CVE-2013-4207

Mitre link : CVE-2013-4207

CVE.ORG link : CVE-2013-4207

JSON object : View

Products Affected

simon_tatham

putty

putty

putty

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2013-4207", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-08-19T23:55:08.767", "references": [{"url": "http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/54379", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/54533", "source": "secalert@redhat.com"}, {"url": "http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-bignum-division-by-zero.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2013/dsa-2736", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2013/08/06/11", "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en PuTTY 0.62 y anteriores, permite a servidores SSH remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) a trav\u00e9s de una firma DSA no v\u00e1lida que no es manejada adecuadamente durante el c\u00e1lculo de un inverso modular que provoca el desbordamiento durante una divisi\u00f3n entre cero por la funcionalidad \"bignum\". Vulnerabilidad distinta de CVE-2013-4206."}], "lastModified": "2021-08-06T16:58:10.337", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:putty:putty:0.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D5EB349-B1DF-4CF5-9468-37DC66A929C3"}, {"criteria": "cpe:2.3:a:putty:putty:0.46:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF223411-6FA4-43EC-8668-7DB4A98E4DEA"}, {"criteria": "cpe:2.3:a:putty:putty:0.47:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0E87C56-DFD9-45D9-9169-3BB94F647F15"}, {"criteria": "cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1283B462-042C-4857-A700-4179AAE20E2F"}, {"criteria": "cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2791C9DD-F55D-4683-85AF-B6814C34EFBF"}, {"criteria": "cpe:2.3:a:putty:putty:0.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D7582C1-AA8E-41E4-9D69-9A18A5B76CB0"}, {"criteria": "cpe:2.3:a:putty:putty:0.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC082AE0-C49D-4944-BE76-B751DAD1EF84"}, {"criteria": "cpe:2.3:a:putty:putty:0.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23BAD8E4-2D3A-45EE-A25D-77BD698119BB"}, {"criteria": "cpe:2.3:a:putty:putty:0.53b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F7716EC-E0F9-4E50-8351-35D2F248B380"}, {"criteria": "cpe:2.3:a:putty:putty:0.54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46C2BD4D-9817-459E-ACF4-9C95233200A2"}, {"criteria": "cpe:2.3:a:putty:putty:0.55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22EE5957-76F3-4B20-ADE7-E72D1300A3F0"}, {"criteria": "cpe:2.3:a:putty:putty:0.56:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "826FA7E4-7F48-4D1C-856C-A965527B0950"}, {"criteria": "cpe:2.3:a:putty:putty:0.57:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA54ADC7-2A36-40DA-8219-DAA31509E534"}, {"criteria": "cpe:2.3:a:putty:putty:0.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A14381E-91A1-4902-B409-1281CFA2D561"}, {"criteria": "cpe:2.3:a:putty:putty:0.59:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B33EB10-535F-42F2-8F78-CE128A89447C"}, {"criteria": "cpe:2.3:a:putty:putty:0.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "218F9EAF-C260-43EC-99C4-EFACA9A1DA8D"}, {"criteria": "cpe:2.3:a:putty:putty:0.61:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5966235B-2F1A-45C5-AF65-99FFFE4725DF"}, {"criteria": "cpe:2.3:a:putty:putty:2010-06-01:r8967:*:*:development_snapshot:*:*:*", "vulnerable": true, "matchCriteriaId": "820B9CC0-2A18-4357-B01F-565A0E35E275"}, {"criteria": "cpe:2.3:a:simon_tatham:putty:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A8E4288-5CEA-42F3-BF6A-FE7D78C907C0", "versionEndIncluding": "0.62"}, {"criteria": "cpe:2.3:a:simon_tatham:putty:0.53:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "129133D1-B374-4743-9F52-27D0A9558D17"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}