PT-2018-4399

Name of the Vulnerable Software and Affected Versions wpa supplicant versions 2.x before 2.6 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending an EAP-pwd Confirm message followed by the Identity exchange when EAP-pwd is enabled. Th...

wpa_supplicant/hostapd eap_peer/eap_pwd.c eap_pwd_perform_confirm_exchange() function out-of-bounds read vulnerability

hostapd is a user-state daemon for APs and authentication servers. wpasupplicant is a WiFi-capable component for Android that supports authentication of wireless connections. hostapd eappeer/eappwd.c An out-of-bounds read vulnerability exists in eappwdperformconfirmexchange confirm message...