CVE-2014-1692
HP Security Bulletin HPSBUX03188 SSRT101487 1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.
La función hash_buffer en schnorr.c en OpenSSH hasta 6.4 cuando Makefile.inc se modifica para habilitar el protocolo J-PAKE, no inicializa ciertas estructuras de datos, lo que podría permitir a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o tienen impacto no especificado a través de vectores que provocan una condición de error.
Potential security vulnerabilities have been identified with HP Matrix Operating Environment. The vulnerabilities could be exploited remotely resulting in unauthorized modification, unauthorized access, or unauthorized disclosure of information. Revision 1 of this advisory.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2014-01-29 CVE Reserved
- 2014-01-29 CVE Published
- 2024-08-06 CVE Updated
- 2025-05-05 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://openwall.com/lists/oss-security/2014/01/29/10 | Mailing List | |
| http://openwall.com/lists/oss-security/2014/01/29/2 | Mailing List | |
| http://osvdb.org/102611 | Broken Link | |
| http://secunia.com/advisories/60184 | Third Party Advisory | |
| http://www-01.ibm.com/support/docview.wss?uid=isg3T1020637 | Third Party Advisory | |
| http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/schnorr.c.diff?r1=1.9%3Br2=1.10%3Bf=h | X_refsource_misc | |
| http://www.securityfocus.com/bid/65230 | Third Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/90819 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://marc.info/?l=bugtraq&m=141576985122836&w=2 | 2023-02-13 | |
| http://marc.info/?l=bugtraq&m=144050155601375&w=2 | 2023-02-13 | |
| http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/schnorr.c#rev1.10 | 2023-02-13 |