CVE-2017-11670

A length validation leading to out-of-bounds read and write flaw was found in the way eapmd5pass 1.4 handled network traffic in the extracteapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic...