Unscored severity · published Aug 19, 2013
CVE-2013-4208
The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Putty · Putty
0.45; 0.46; 0.47; 0.48; 0.49; 0.50; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4208
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4208
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-08/msg00035.html
Vendor Advisory
http://secunia.com/advisories/54379
secunia.com
http://secunia.com/advisories/54533
www.chiark.greenend.org.uk
http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped.html
www.debian.org
http://www.debian.org/security/2013/dsa-2736
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/08/06/11
More from Putty
9.8
CVE-2019-17067
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection
9.8
CVE-2019-9898
Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71
9.8
CVE-2019-9895
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding
9.8
CVE-2017-6542
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging…
8.1
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response