In PuTTY before 0.68, if SSH agent forwarding is enabled, local attackers that are also able to connect to the UNIX domain socket could have overwritten heap data (CVE-2017-6542).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2017-0093.json"