11 matches found
EUVD-2019-2125
Malware in sbrugna...
Design/Logic Flaw
hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...
CVE-2019-10064
hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...
Ubuntu: Security Advisory (USN-3944-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-3944-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3944-1 advisory. It was discovered that wpasupplicant and hostapd were vulnerable to a side channel attack against EAP- pwd. A remote attacker cou...
USN-3944-1: wpa_supplicant and hostapd vulnerabilities
It was discovered that wpasupplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords. CVE-2019-9495 Mathy Vanhoef discovered that wpasupplicant and hostapd incorrectly validated received scalar and...
CVE-2016-10743
creationtimestamp| type| source ---|---|--- 2019-03-23 21:29:06+00:00| seen| https://t.me/cibsecurity/3307 2020-02-28 18:33:05+00:00| seen| https://t.me/cibsecurity/10175 2020-02-28 19:20:18+00:00| seen| https://t.me/VulnerabilityNews/12805...
CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
CVE-2016-10743
CVE-2016-10743 concerns hostapd prior to 2.6 using a low-quality PRNG via an os_random() path, exposing insufficient entropy. The connected sources show concrete details: affected component is hostapd in EAP mode, where calls to rand()/random() occurred without srand()/srandom(), leading to deter...
