Lucene search

K
cvelistMitreCVELIST:CVE-2019-11555
HistoryApr 26, 2019 - 9:16 p.m.

CVE-2019-11555

2019-04-2621:16:24
mitre
raw.githubusercontent.com

5.5 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.4%

The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.