CVE-2015-5309

Fixed in a distro release EPSS 3%

Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an ECH (erase characters) escape sequence with a large parameter value, which triggers a buffer underflow.

Published 2015-12-07 · CVE record · OSV

Products: opensuse leap, opensuse, simon_tatham putty

Distro releases