UpHeron
All vulnerabilities

Servers and applications

CVE-2014-1692

The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.

Severity
High 7.3
Published
29 Jan 2014
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSHServers and applications · cpe:a:openbsd:openssh
  • Every version up to 6.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-1692
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-1692