GLSA-201908-25 : hostapd and wpa_supplicant: Denial of service

The remote host is affected by the vulnerability described in GLSA-201908-25 hostapd and wpasupplicant: Denial of service A vulnerability was discovered in hostapds and wpasupplicants eapserver/eapserverpwd.c and eappeer/eappwd.c files. Impact : An attacker could cause a possible Denial of Servic...

CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...