p PatchFirst

CVE-2016-2563

CVE-2016-2563

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service (stack memory corruption) or execute arbitrary code via a crafted SCP-SINK file-size response to an SCP download request.

CVSS 9.8 · Critical · EPSS 32.8% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • putty Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.67-1

    Update to 0.67-1

  • putty Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.67-1

    Update to 0.67-1

  • putty Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.67-1

    Update to 0.67-1

Original sources

Check your server →