CVE-2013-4206

Description

Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) and possibly trigger memory corruption or code execution via a crafted DSA signature, which is not properly handled when performing certain bit-shifting operations during modular multiplication.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Other references

• http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modmul.html
• https://www.cve.org/CVERecord?id=CVE-2013-4206