p PatchFirst

CVE-2013-4208

CVE-2013-4208

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • filezilla Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.7.3-1

    Update to 3.7.3-1

  • filezilla Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.7.3-1

    Update to 3.7.3-1

  • filezilla Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.7.3-1

    Update to 3.7.3-1

  • putty Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.63-1

    Update to 0.63-1

  • putty Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.63-1

    Update to 0.63-1

  • putty Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.63-1

    Update to 0.63-1

Original sources

Check your server →