CVE-2013-4852

Publication date 19 August 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.

Status

Package Ubuntu Release Status
filezilla 18.10 cosmic
Not affected
18.04 LTS bionic
Not affected
17.10 artful Ignored end of life
17.04 zesty Ignored end of life
16.10 yakkety Ignored end of life
16.04 LTS xenial
Not affected
15.10 wily Ignored end of life
15.04 vivid Ignored end of life
14.10 utopic Ignored end of life
14.04 LTS trusty Not in release
13.10 saucy Ignored end of life
13.04 raring Ignored end of life
12.10 quantal Ignored end of life
12.04 LTS precise Ignored end of life
10.04 LTS lucid Ignored end of life
putty 18.10 cosmic
Fixed in 0.63-1
18.04 LTS bionic
Fixed in 0.63-1
17.10 artful
Fixed in 0.63-1
17.04 zesty
Fixed in 0.63-1
16.10 yakkety
Fixed in 0.63-1
16.04 LTS xenial
Fixed in 0.63-1
15.10 wily
Fixed in 0.63-1
15.04 vivid
Fixed in 0.63-1
14.10 utopic
Fixed in 0.63-1
14.04 LTS trusty
Fixed in 0.63-1
13.10 saucy
Fixed in 0.63-1
13.04 raring
Fixed in 0.62-10ubuntu0.1
12.10 quantal
Fixed in 0.62-9ubuntu0.1
12.04 LTS precise
Fixed in 0.62-6ubuntu0.1
10.04 LTS lucid Ignored end of life

References

Other references

Access our resources on patching vulnerabilities