CVE-2013-4208 Information disclosure in n/a

What is CVE-2013-4208?

CVE-2013-4208 is a low-severity vulnerability in n/a, published on 19 Aug 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The rsa_verify function in PuTTY before 0.63 (1) does not clear sensitive process memory after use and (2) does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys.

Weakness: CWE-200

Which versions are affected by CVE-2013-4208?

It affects 2 products.

Products include Putty Putty, Simon Tatham Putty.

How do I fix CVE-2013-4208?

Upgrade to a fixed version.

Is CVE-2013-4208 being exploited?

There is no known exploitation of CVE-2013-4208 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2004-1008 Integer overflow in n/a Critical 10.0
• CVE-2019-17067 Other in n/a Critical 9.8
• CVE-2021-36367 Auth bypass in n/a High 8.1
• CVE-2016-6167 Other in n/a High 7.8
• CVE-2021-33500 Denial of service in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2013-4208, GHSA-gpf3-9fhm-cfpr.