CVE-2014-1692 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Openssh

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents7 sources

Severity

7.5HIGHNVD

EPSS

12.5%

top 6.04%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Openbsd Openssh Paloalto Pan-os

Timeline

PublishedJan 29

Latest updateMay 13

Description

The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDopenbsd/openssh6.4

▶Palo Altopaloalto/pan-os

🔴Vulnerability Details

GHSA

GHSA-pxrc-fqc7-h5rw: The hash_buffer function in schnorr↗2022-05-13

▶

CVEList

CVE-2014-1692: The hash_buffer function in schnorr↗2014-01-29

▶

📋Vendor Advisories

Palo Alto

PAN-SA-2020-0004 Informational: Third-party or open source vulnerabilities that do not affect PAN-OS↗2020-05-13

▶

Debian

CVE-2014-1692: openssh - The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc ...↗2014

▶

Red Hat

openssh: uninitialized variable use in J-PAKE implementation↗2013-01-29

▶

💬Community

Bugzilla

CVE-2014-1692 openssh: uninitialized variable use in J-PAKE implementation↗2014-01-29

▶