← Back

CVE-2015-2157

nvd nist
Published: Mar 27, 2015Modified: May 6, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.

Affected (19)

Show all products
Debian: Debian Linux · Fedoraproject: Fedora · Opensuse: Opensuse · Putty: Putty · Simon Tatham: Putty
Debian
1 product
Debian Linux
Fedoraproject
1 product
Fedora
Opensuse
1 product
Opensuse
Putty
1 product
Putty
Simon Tatham
1 product
Putty
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 7.0
Fedoraproject
Fedora
Version 20
Fedora
Version 22
Opensuse
Opensuse
Version 13.1
Opensuse
Version 13.2
Configuration B
14 vulnerable
Vulnerable SoftwareAffected Versions
Putty
Putty
Version 0.51
Putty
Version 0.52
Putty
Version 0.53b
Putty
Version 0.54
Putty
Version 0.55
Putty
Version 0.56
Putty
Version 0.57
Putty
Version 0.58
Putty
Version 0.59
Putty
Version 0.60
Putty
Version 0.61
Putty
Version 0.62
Putty
Version 0.63
Putty
Version 0.53

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (20)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.