CVE-2014-1692

The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.
Configurations

Configuration 1 (hide)

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-01-29 16:02

Updated : 2024-02-28 12:20


NVD link : CVE-2014-1692

Mitre link : CVE-2014-1692

CVE.ORG link : CVE-2014-1692


JSON object : View

Products Affected

openbsd

  • openssh
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer