PT-2014-4295

Name of the Vulnerable Software and Affected Versions OpenSSH versions through 6.4 Description The issue is related to the hash buffer function in schnorr.c, which does not initialize certain data structures when the J-PAKE protocol is enabled. This could allow remote attackers to cause a denial ...