CVE-2017-6542

Fixed in a distro release EPSS 22%

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.

Published 2017-03-27 · CVE record · OSV

Products: putty, opensuse leap, opensuse_project leap

Distro releases