PT-2015-6431

Name of the Vulnerable Software and Affected Versions hostapd and wpa supplicant versions 1.0 through 2.4 Description The issue concerns the EAP-pwd server and peer implementation, which fails to validate if a fragment is already being processed. This allows remote attackers to cause a denial of...

PT-2015-2729

Name of the Vulnerable Software and Affected Versions hostapd and wpa supplicant versions 1.0 through 2.4 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted message payload. This can be achieved by sending a...

hostapd and wpa_supplicant -- multiple vulnerabilities

Jouni Malinen reports: WPS UPnP vulnerability with HTTP chunked transfer encoding. 2015-2 - CVE-2015-4141 Integer underflow in AP mode WMM Action frame processing. 2015-3 - CVE-2015-4142 EAP-pwd missing payload length validation. 2015-4 - CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146...

freeradius3 -- insufficient validation on packets

Jouni Malinen reports: The EAP-PWD module performed insufficient validation on packets received from an EAP peer. This module is not enabled in the default configuration. Administrators must manually enable it for their server to be vulnerable. Only versions 3.0 up to 3.0.8 are affected...