{"id":"CVE-2015-2157","details":"The (1) ssh2_load_userkey and (2) ssh2_save_userkey functions in PuTTY 0.51 through 0.63 do not properly wipe SSH-2 private keys from memory, which allows local users to obtain sensitive information by reading the memory.","modified":"2026-04-16T06:17:04.568313191Z","published":"2015-03-27T14:59:05Z","related":["openSUSE-SU-2024:10374-1"],"references":[{"type":"ADVISORY","url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"},{"type":"ADVISORY","url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped-2.html"},{"type":"ADVISORY","url":"http://www.debian.org/security/2015/dsa-3190"},{"type":"FIX","url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"},{"type":"FIX","url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped-2.html"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151790.html"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151839.html"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151933.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00032.html"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2015/02/28/4"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2015/02/28/5"},{"type":"WEB","url":"http://www.securityfocus.com/bid/72825"}],"schema_version":"1.7.5"}