CVE-2017-6542: Opensuse Leap

Critical severity, CVSS 9.8. EPSS: 21.8% chance of exploitation in the next 30 days.

The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, which trigger a buffer overflow.

Affected products

• Opensuse Leap: version 42.2 only
• Opensuse Project Leap: version 42.1 only
• Putty Putty: up to and including 0.67

Published 2017-03-27. Last modified 2026-06-17.