CVE-2017-6542
Critical · 9.8CVSS
9.8
EPSS
21.8%
Published
Mar 27, 2017
CISA due date
—
The record
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.2 | putty | 0 | 0.68-r0 |
| Alpine:v3.3 | putty | 0 | 0.68-r0 |
| Alpine:v3.4 | putty | 0 | 0.68-r0 |
| Alpine:v3.5 | putty | 0 | 0.68-r0 |
| Debian:11 | putty | 0 | 0.67-3 |
| Debian:12 | putty | 0 | 0.67-3 |
| Debian:13 | putty | 0 | 0.67-3 |
| Mageia:5 | putty | 0 | 0.68-1.mga5 |
| Ubuntu:16.04:LTS | putty | 0 | 0.67-3build0.16.04.1 |
| Ubuntu:18.04:LTS | putty | 0 | 0.70-4 |
| openSUSE:Tumbleweed | putty | 0 | 0.76-1.2 |
Related vulnerabilities
- CVE-2016-2563 Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and… Also affects putty
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90801 A security flaw has been discovered in GNU Binutils 2.47. CWE-119
- CVE-2026-87933 A vulnerability was found in DaveGamble cJSON up to 1.7.19. CWE-119