Unrated severityNVD Advisory· Published Aug 19, 2013· Updated Apr 29, 2026
CVE-2013-4206
CVE-2013-4206
Description
Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.
Affected products
20cpe:2.3:a:putty:putty:0.45:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:putty:putty:0.45:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.46:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.47:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.50:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.51:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.52:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.53b:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.54:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.55:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.56:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.57:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.58:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.59:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.60:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:0.61:*:*:*:*:*:*:*
- cpe:2.3:a:putty:putty:2010-06-01:r8967:*:*:development_snapshot:*:*:*
- cpe:2.3:a:simon_tatham:putty:*:*:*:*:*:*:*:*range: <=0.62
- cpe:2.3:a:simon_tatham:putty:0.53:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- svn.tartarus.org/sgt/putty/sshbn.cnvdPatch
- secunia.com/advisories/54379nvdVendor Advisory
- www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modmul.htmlnvdVendor Advisory
- lists.opensuse.org/opensuse-updates/2013-08/msg00035.htmlnvd
- secunia.com/advisories/54533nvd
- www.debian.org/security/2013/dsa-2736nvd
- www.openwall.com/lists/oss-security/2013/08/06/11nvd
News mentions
0No linked articles in our index yet.