Novell Home

CVE-2013-4207

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2013-4207 at MITRE

Description

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.

NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

SUSE information

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
openSUSE 12.3
  • filezilla >= 3.7.3-5.4.1
  • filezilla-debuginfo >= 3.7.3-5.4.1
  • filezilla-debugsource >= 3.7.3-5.4.1
  • filezilla-lang >= 3.7.3-5.4.1
Patchnames:
openSUSE-2013-650

© 2015 Novell