Lucene search
K

5 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-40892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in...

9.8CVSS5.7AI score0.00419EPSS
Exploits0References2
OSV
OSV
added 2026/04/21 9:16 p.m.3 views

DEBIAN-CVE-2026-40892

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...

9.8CVSS5.6AI score0.00419EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.5 views

SUSE CVE-2014-1692

The hashbuffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service memory corruption or have unspecified other impact via vectors tha...

7.5CVSS8.4AI score0.04587EPSS
Exploits1References3
Prion
Prion
added 2014/01/29 4:2 p.m.80 views

Design/Logic Flaw

The hashbuffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service memory corruption or have unspecified other impact via vectors tha...

7.5CVSS7.5AI score0.04587EPSS
Exploits1References11Affected Software1
Positive Technologies
Positive Technologies
added 2014/01/29 12:0 a.m.7 views

PT-2014-4295

Name of the Vulnerable Software and Affected Versions OpenSSH versions through 6.4 Description The issue is related to the hash buffer function in schnorr.c, which does not initialize certain data structures when the J-PAKE protocol is enabled. This could allow remote attackers to cause a denial ...

7.5CVSS6.9AI score0.04587EPSS
Exploits1References13
Rows per page
Query Builder