Maple Labs

CVE search · CVE-2015-2157

CVE-2015-2157

low 2.1

The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-200

Severity

VersionScoreVectorSource
CVSS 2.0 low 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References