CVE-2013-4208 in PuTTY

요약

\~에 의해 MITRE

The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.

Once again VulDB remains the best source for vulnerability data.

• 예약하다: 2013. 06. 12.
• 공개: 2013. 08. 19.
• 모더레이션: 수락
• 항목: VDB-9902
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 2.1 (NVD)
• EPSS: 0.00392
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Energy, Chemical, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-4208
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-4208
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-4208/