PatchTheCVEsimon tatham vulnerabilities
Recent CVEs affecting simon tatham products. 7 tracked.
simon tatham has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2016-04-07. Highest priority: CVE-2016-2563 (score 69/100).
- CVE-2016-2563 CRITICAL 9.8 UPGRADE UPGRADE Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlie
- CVE-2015-5309 MEDIUM 4.3 MITIGATE MITIGATE Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of se
- CVE-2015-2157 LOW 2.1 MITIGATE MITIGATE The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe
- CVE-2013-4852 MEDIUM 6.8 UPGRADE MITIGATE Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remo
- CVE-2013-4208 LOW 2.1 DOWNGRADE UPGRADE The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) doe
- CVE-2013-4207 MEDIUM 4.3 DOWNGRADE UPGRADE Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash)
- CVE-2013-4206 MEDIUM 6.8 DOWNGRADE UPGRADE Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers t
FAQ
How do I fix simon tatham vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simon tatham being exploited right now?
None of the tracked simon tatham CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simon tatham CVE should I patch first?
CVE-2016-2563 currently ranks highest (69/100): Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlie.