PT-2017-17144 · Simon Tatham+1 · Putty+1

Tim Kosse · Publicado 2017-02-23 · Atualizado 2024-06-15 · CVE-2017-6542

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PuTTY versions prior to 0.68

Description The issue allows remote attackers to have an unspecified impact via a large length value in an agent protocol message. This is achieved by leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which triggers a buffer overflow.

Recommendations For versions prior to 0.68, update to version 0.68 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2017-1204

CVE-2017-6542

MGASA-2017-0093

OPENSUSE-SU-2024:11201-1

Produtos afetados

Alt Linux

Putty

Referências · 26

• 🔥 https://exploit-db.com/exploits/42137 · Exploit
• https://git.tartarus.org/?p=simon/putty.git%3Ba=commitdiff%3Bh=4ff22863d895cb7ebfced4cf923a012a614adaa8 · Nota
• http://chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-6542 · Nota
• https://security.gentoo.org/glsa/201703-03 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-17068 · Nota
• https://cve.org/CVERecord?id=CVE-2017-6542 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-6542 · Nota de Segurança
• http://securitytracker.com/id/1038067 · Nota
• https://security.gentoo.org/glsa/201706-09 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-6542 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2017-0093.html · Nota de Segurança
• https://osv.dev/vulnerability/ALPINE-CVE-2017-6542 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2017-6542 · Nota
• http://securityfocus.com/bid/97156 · Nota