Known Vulnerabilities for products from Simon Tatham

Listed below are 8 of the newest known vulnerabilities associated with the vendor "Simon Tatham".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2016-6167 Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL... 7.8 - HIGH 2017-01-30 2022-05-01
CVE-2016-2563 Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote... 9.8 - CRITICAL 2016-04-07 2016-12-03
CVE-2015-5309 Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory c... 4.3 - MEDIUM 2015-12-07 2018-10-30
CVE-2015-2157 The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private k... 2.1 - LOW 2015-03-27 2019-03-21
CVE-2013-4852 Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers ... 6.8 - MEDIUM 2013-08-19 2021-08-06
CVE-2013-4208 The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free cert... 2.1 - LOW 2013-08-19 2019-03-21
CVE-2013-4207 Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid... 4.3 - MEDIUM 2013-08-19 2021-08-06
CVE-2013-4206 Heap-based buffer underflow in the modmul function in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denia... 6.8 - MEDIUM 2013-08-19 2021-08-06

Known software with vulnerabilities from Simon Tatham

Type Vendor Product Version
ApplicationSimon TathamPutty-