NVD

Id
30269  
Name
CVE-2014-1692  
Description
The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-01-29  
Modified Date
2017-01-06  
Seq
2014-1692  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160209 30269 CVE-2014-1692 SSRT101487  View
160210 30269 CVE-2014-1692 HPSBMU03409  View
160211 30269 CVE-2014-1692 [oss-security] 20140129 Re: OpenSSH J-PAKE vulnerability (no cause for panic! remain calm!)  View
160212 30269 CVE-2014-1692 [oss-security] 20140128 OpenSSH J-PAKE vulnerability (no cause for panic! remain calm!)  View
160213 30269 CVE-2014-1692 60184  View
160214 30269 CVE-2014-1692 http://www-01.ibm.com/support/docview.wss?uid=isg3T1020637  View
160215 30269 CVE-2014-1692 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/schnorr.c.diff?r1=1.9;r2=1.10;f=h  View
160216 30269 CVE-2014-1692 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/schnorr.c#rev1.10  View
160217 30269 CVE-2014-1692 65230  View
160218 30269 CVE-2014-1692 openssh-cve20141692-code-exec(90819)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12409 JVNDB-2014-001284 OpenSSH の schnorr.c の hash_buffer 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSH の schnorr.c の hash_buffer 関数は、Makefile.inc が J-PAKE プロトコルを有効にするために変更された場合、特定のデータ構造を初期化しないため、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-1692 68979 CVE-2014-1692 30269 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001284.html 2014-01-29 2014-12-08 View