CVE:CVE-2017-6542
CNNVD:CNNVD-201703-326
PuTTY是软件开发者Simon Tatham所研发的一套免费的Telnet、Rlogin和SSH客户端软件。该软件主要用于对Linux系统进行远程管理。
PuTTY 0.68之前的版本中的‘ssh_agent_channel_data’函数存在安全漏洞。远程攻击者可利用该漏洞执行任意代码或造成拒绝服务。
solution:Upgrade putty putty to a higher version than 0.67,and avoid the version (,0.67]; Upgrade opensuse leap to a higher version than 42.2,and avoid the version 42.2; Upgrade opensuse_project leap to a higher version than 42.1,and avoid the version 42.1