CVE-2017-11670

The CVE-2017-11670 entry concerns eapmd5pass 1.4, where a length validation flaw in extract_eapusername allows an out-of-bounds read/write. A remote attacker could crash the eapmd5pass process by sending specially crafted network traffic. Connected sources (CNVD/NVD) corroborate the remote‑trigge...