Buffer overflow in Putty

CVE-2011-4607

PuTTY 0.59 through 0.61 does not clear sensitive process memory when managing user replies that occur during keyboard-interactive authentication, which might allow local users to read login passwords by obtaining access to the process' memory.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.

Affected products

  • Putty — versions 0.59, 0.60, 0.61
  • N/a — versions n/a

Weakness classification (CWE)

References