906 matches found
CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
CVE-2016-10743
CVE-2016-10743 concerns hostapd prior to 2.6 using a low-quality PRNG via an os_random() path, exposing insufficient entropy. The connected sources show concrete details: affected component is hostapd in EAP mode, where calls to rand()/random() occurred without srand()/srandom(), leading to deter...
CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
UBUNTU-CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
CVE-2016-10743: Insufficient Entropy in PRNG
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
Denial Of Service (DoS)
wpasupplicant is vulnerable to denial of service DoS attacks. The vulnerability exists as Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpasupplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of...
PT-2019-17446
Name of the Vulnerable Software and Affected Versions hostapd version 2.6 Description An issue exists in the 802.11w security state handling for connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations...
PT-2019-6324
Name of the Vulnerable Software and Affected Versions hostapd version 2.6 Description A denial-of-service issue exists where an attacker could trigger an access point to send IAPP location updates for stations before the required authentication process has completed. This could lead to different...
openSUSE Security Update : hostapd (openSUSE-2018-1293)
hostapd was updated to fix following security issue : - CVE-2018-14526: Ignore unauthenticated encrypted EAPOL-Key data bsc1104205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Security update for hostapd (low)
hostapd was updated to fix following security issue: - CVE-2018-14526: Ignore unauthenticated encrypted EAPOL-Key data bsc1104205...
openSUSE: Security Advisory for hostapd (openSUSE-SU-2018:3527-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
USN-3745-1: wpa_supplicant and hostapd vulnerability
It was discovered that wpasupplicant and hostapd incorrectly handled certain messages. An attacker could possibly use this to access sensitive information...
Rogue Access Point Toolkit : hostapd-mana
hostapd-mana is a featureful rogue wifi access point tool. It can be used for a myriad of purposes from tracking and deanonymising devices aka Snoopy, gathering corporate credentials from devices attempting EAP aka WPE or attracting as many devices as possible to connect to perform MitM attacks...
FreeBSD : wpa_supplicant -- unauthenticated encrypted EAPOL-Key data (6bedc863-9fbe-11e8-945f-206a8a720317)
SO-AND-SO reports : A vulnerability was found in how wpasupplicant processes EAPOL-Key frames. It is possible for an attacker to modify the frame in a way that makes wpasupplicant decrypt the Key Data field without requiring a valid MIC value in the frame, i.e., without the frame being...
Buffer overflow
The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...
DEBIAN-CVE-2015-5314
The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...
CVE-2015-5314
The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...
CVE-2015-5314
The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...