CVE-2015-5309: Opensuse Leap

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an ECH (erase characters) escape sequence with a large parameter value, which triggers a buffer underflow.

Affected products

• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Simon Tatham Putty: up to and including 0.65

Published 2015-12-07. Last modified 2026-06-17.