← back
CVE-2017-6542

CVE-2017-6542

EPSS 21.8%
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/42137/unverifiedexploitdbwww.exploit-db.com/exploits/42137unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-updates/2017-03/msg00055.htmlhttps://git.tartarus.org/?p=simon/putty.git%3Ba=commitdiff%3Bh=4ff22863d895cb7ebfced4cf923a012a614adaa8https://security.gentoo.org/glsa/201703-03https://security.gentoo.org/glsa/201706-09https://www.exploit-db.com/exploits/42137/http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-agent-fwd-overflow.htmlhttp://www.securityfocus.com/bid/97156http://www.securitytracker.com/id/1038067