Linux Kernel 'mac80211/sta_info.c'空指针引用拒绝服务漏洞

Bugtraq ID:66591 CVE ID:CVE-2014-2706 Linux Kernel是一款开源的操作系统。 支持Generic IEEE 802.11网络栈的Linux Kernel 'mac80211/stainfo.c'在处理TX路径和STA唤醒存在竞争条件漏洞，允许攻击者利用漏洞进行拒绝服务攻击，使内核崩溃。 0 Linux Kernel 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0706)

BUGTRAQ ID: 65985 CVECAN ID: CVE-2014-0706 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...

CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

[CommView for WiFi 7.0] Wireless Network Monitor and Analyzer

CommView for WiFi is a powerful wireless network monitor and analyzer for 802.11 a/b/g/n/ac networks. Loaded with many user-friendly features, CommView for WiFi combines performance and flexibility with an ease of use unmatched in the industry. CommView for WiFi captures every packet on the air t...

CVE-2013-5184

CVE-2013-5184 affects Apple Mac OS X kernels prior to 10.9. The issue is an improper error check when processing multicast Wi‑Fi packets, enabling remote attackers in an 802.11 network’s coverage area to trigger a denial of service (system crash). Public details in the provided documents are limi...

CVE-2013-3659

The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area...

Design/Logic Flaw

The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area...

CVE-2013-3659

CVE-2013-3659 affects the NTT DOCOMO overseas usage application for Android (Ver 2.0.0–2.0.4). The vulnerability is in the Wi‑Fi connection process, where improper handling allows an attacker in range of an 802.11 network to obtain user information as the device connects to a Wi‑Fi access point. ...

Oracle Linux 5 : Low: / wireshark (ELSA-2007-0066)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0066 advisory. 0.99.5-EL4.1.0.1 - Add patch oracle-ocfs2-network.patch 0.99.5-1 - multiple security issues fixed 225689 - CVE-2007-0459 - The TCP dissector could hang...

CVE-2013-2310

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile...

Code injection

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile...

CVE-2013-2310

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile...

WiFi Hacking software AirCrack-NG updated after 3 years

The Best WiFi hacking suite AirCrack-NG updated to 1.2 Beta 1 after three years from the last release. Aircrack-ng is a set of tools for auditing wireless networks. New version added a few new tools and scripts including distributed cracking tool. Aircrack-ng is an 802.11 WEP and WPA-PSK keys...

Fedora Update for hostapd FEDORA-2012-15759

Check for the Version of hostapd OpenVAS Vulnerability Test Fedora Update for hostapd FEDORA-2012-15759 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for hostapd FEDORA-2012-15748

Check for the Version of hostapd OpenVAS Vulnerability Test Fedora Update for hostapd FEDORA-2012-15748 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: hostapd-0.7.3-10.fc17

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back- ground and acts as the backe...

[SECURITY] Fedora 16 Update: hostapd-0.7.3-10.fc16

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back- ground and acts as the backe...

[SECURITY] Fedora 18 Update: hostapd-1.0-3.fc18

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back- ground and acts as the backe...

DSA-2557-1 hostapd - denial of service

Bulletin has no description...

Mandriva Linux Security Advisory : wireshark (MDVSA-2012:042)

Multiple vulnerabilities was found and corrected in Wireshark : - The ANSI A dissector could dereference a NULL pointer and crash. - The IEEE 802.11 dissector could go into an infinite loop. - The pcap and pcap-ng file parsers could crash trying to read ERF data. - The MP2T dissector could try to...