Information disclosure in PuTTY - CVE-2015-2157
Published: March 27, 2015 / Updated: July 28, 2020
Vulnerability identifier: #VU32444
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-2157
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local non-authenticated attacker to gain access to sensitive information.
The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.
Affected software
PuTTY
putty (Alpine package)
putty
Fedora
putty (Alpine package)
putty
Fedora
How to mitigate CVE-2015-2157
Install update from vendor's website.
PuTTY - update to 0.64
putty (Alpine package) - update to 0.64-r0
putty - addressed in versions 0.63-4.el5, 0.63-4.el6, 0.64-1.fc21, 0.64-1.fc22
putty (Alpine package) - update to 0.64-r0
putty - addressed in versions 0.63-4.el5, 0.63-4.el6, 0.64-1.fc21, 0.64-1.fc22
External References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151790.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151839.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151933.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00032.html
- http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
- http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped-2.html
- http://www.debian.org/security/2015/dsa-3190
- http://www.openwall.com/lists/oss-security/2015/02/28/4
- http://www.openwall.com/lists/oss-security/2015/02/28/5
- http://www.securityfocus.com/bid/72825