Buffer overflow in Putty

CVE-2013-4207

Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.

Vulnerability class: Buffer Overflow

EPSS: 0.018 (77.8th percentile) — read the EPSS interpretation.