CVE-2014-1692

7.3 highEPSS 4.7%

High (7.3) in openbsd openssh. EPSS 4.7% chance of exploitation in the next 30 days.

The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 4.7% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2014-01-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openbsd:openssh

References

http://marc.info/?l=bugtraq&m=141576985122836&w=2
http://marc.info/?l=bugtraq&m=144050155601375&w=2
http://openwall.com/lists/oss-security/2014/01/29/10
http://openwall.com/lists/oss-security/2014/01/29/2
http://osvdb.org/102611

Check your stack JSON