NVD

Id
18761  
Name
CVE-2016-2563  
Description
Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service (stack memory corruption) or execute arbitrary code via a crafted SCP-SINK file-size response to an SCP download request.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-07  
Modified Date
2016-12-02  
Seq
2016-2563  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103746 18761 CVE-2016-2563 openSUSE-SU-2016:1453  View
103747 18761 CVE-2016-2563 20160309 CVE-2016-2563 - PuTTY/PSCP <=0.66 buffer overflow - vuln-pscp-sink-sscanf  View
103748 18761 CVE-2016-2563 http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-pscp-sink-sscanf.html  View
103749 18761 CVE-2016-2563 84296  View
103750 18761 CVE-2016-2563 1035257  View
103751 18761 CVE-2016-2563 https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-2563  View
103752 18761 CVE-2016-2563 GLSA-201606-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1208 JVNDB-2016-001981 PuTTY および KiTTY の SCP コマンドラインユーティリティにおけるスタックベースのバッファオーバーフローの脆弱性 PuTTY および KiTTY の SCP コマンドラインユーティリティには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-2563 89069 CVE-2016-2563 18761 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001981.html 2016-03-05 2016-04-12 View