Stack-based buffer overflow in PuTTY - CVE-2016-2563

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing a crafted SCP-SINK file-size response to an SCP download request. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2016-2563

Links to Public Exploits and PoC-codes

• Exploit #3652 - Putty pscp 0.66 - Stack Buffer Overwrite (July 29, 2020)

External References

• http://lists.opensuse.org/opensuse-updates/2016-05/msg00131.html
• http://seclists.org/fulldisclosure/2016/Mar/22
• http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-pscp-sink-sscanf.html
• http://www.securityfocus.com/bid/84296
• http://www.securitytracker.com/id/1035257
• https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-2563
• https://security.gentoo.org/glsa/201606-01

Related Security Bulletins

• Stack-based buffer overflow in PuTTY
• Stack-based buffer overflow in putty (Alpine package)
• Gentoo update for PuTTY
• Fedora EPEL 6 update for putty
• Fedora EPEL 5 update for putty