Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-4445HistoryOct 10, 2012 - 6:55 p.m.
CVE-2012-4445
2012-10-1018:55:00
Debian Security Bug Tracker
security-tracker.debian.org
7
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.082 Low
EPSS
Percentile
94.3%
Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service (crash or abort) via a small “TLS Message Length” value in an EAP-TLS message with the “More Fragments” flag set.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wpa | < 1.0-3 | wpa_1.0-3_all.deb |
| Debian | 11 | all | wpa | < 1.0-3 | wpa_1.0-3_all.deb |
| Debian | 10 | all | wpa | < 1.0-3 | wpa_1.0-3_all.deb |
| Debian | 999 | all | wpa | < 1.0-3 | wpa_1.0-3_all.deb |
| Debian | 13 | all | wpa | < 1.0-3 | wpa_1.0-3_all.deb |
Related
openvas
openvas
Fedora Update for hostapd FEDORA-2012-15759
2012-10-19 00:00:00
Fedora Update for hostapd FEDORA-2012-15748
2012-10-19 00:00:00
FreeBSD Ports: FreeBSD
2012-11-26 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: hostapd-0.7.3-10.fc17
2012-10-18 00:32:53
[SECURITY] Fedora 16 Update: hostapd-0.7.3-10.fc16
2012-10-18 00:28:50
[SECURITY] Fedora 18 Update: hostapd-1.0-3.fc18
2012-10-13 02:59:33
nessus
nessus
Fedora 16 : hostapd-0.7.3-10.fc16 (2012-15748)
2012-10-18 00:00:00
openSUSE Security Update : hostapd (openSUSE-SU-2012:1371-1)
2014-06-13 00:00:00
Debian DSA-2557-1 : hostapd - buffer overflow
2012-10-09 00:00:00
prion
prion
Heap overflow
2012-10-10 18:55:00
osv
osv
hostapd - denial of service
2012-10-08 00:00:00
securityvulns
securityvulns
[PRE-SA-2012-07] hostapd: Missing EAP-TLS message length validation
2012-10-10 00:00:00
hostapd buffer overflow
2012-10-10 00:00:00
[SECURITY] [DSA 2557-1] hostapd security update
2012-10-10 00:00:00
ubuntucve
ubuntucve
CVE-2012-4445
2012-10-10 00:00:00
debian
debian
[SECURITY] [DSA 2557-1] hostapd security update
2012-10-08 08:41:48
freebsd
freebsd
FreeBSD -- Insufficient message length validation for EAP-TLS messages
2012-11-22 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:07.hostapd
2012-11-22 00:00:00
cve
cve
CVE-2012-4445
2012-10-10 18:55:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.082 Low
EPSS
Percentile
94.3%
Related for DEBIANCVE:CVE-2012-4445