Fedora 20 : hostapd-2.3-1.fc20 (2014-13783)

Security fix for CVE-2014-3686. Update to version 2.3 from upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 21 : hostapd-2.3-1.fc21 (2014-13608)

Security fix for CVE-2014-3686. Update to version 2.3 from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

MGASA-2014-0429 Updated wpa_supplicant and hostapd packages fix security vulnerability

A vulnerability was found in the mechanism wpacli and hostapdcli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system call resulting in arbitrary command execution under the privileges of the wpacli/hostapdcli process which may be root in...

Updated wpa_supplicant and hostapd packages fix security vulnerability

A vulnerability was found in the mechanism wpacli and hostapdcli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system call resulting in arbitrary command execution under the privileges of the wpacli/hostapdcli process which may be root in...

wpa_supplicant, hostapd: Arbitrary command execution

Jouni Malinen discovered an input sanitization issue in the wpacli and hostapdcli tools included in the wpasupplicant and hostapd packages. A remote wifi system within range could provide a crafted frame triggering arbitrary command execution under the privileges of the wpacli/hostapdcli process...

DEBIAN-CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2014-3686

CVE-2014-3686 affects wpa_supplicant and hostapd (versions 0.7.2–2.2) where using wpa_cli or hostapd_cli with action scripts can lead to remote arbitrary command execution via a crafted frame. Root cause involves unsanitized input passed to a system() call from action scripts, enabling command in...

Debian: Security Advisory (DSA-3052-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

UBUNTU-CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

openSUSE Security Update : hostapd (openSUSE-SU-2012:1371-1)

This patch validated the message length of EAP-TLS to avoid the potential DoS attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-718. The text description of this plugin is C...

Heartbleed Cupid Wireless Attacks Expose OpenSSL Over WPA

Regardless that the fervor over the Heartbleed OpenSSL vulnerability has died down considerably, patching the bug should remain a top priority for enterprises because researchers continue to find new exploit vectors. The latest takes aim at Heartbleed over wireless networks. A researcher with...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. VID f115f693-36b2-11e2-a633-902b343deec9 OpenVAS Vulnerability Test $ Description: Auto generated from VID f115f693-36b2-11e2-a633-902b343deec9 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD-SA-12:07.hostapd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-12:07.hostapd Security Advisory The FreeBSD Project Topic: Insufficient message length validation for EAP-TLS messages Category: contrib Module: wpa Announced:...

FreeBSD -- Insufficient message length validation for EAP-TLS messages

Problem description: The internal authentication server of hostapd does not sufficiently validate the message length field of EAP-TLS messages...

hostapd security vulnerabilities

Buffer overflow, weak permissions...

[ MDVSA-2012:168 ] hostapd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:168 http://www.mandriva.com/security/ Package : hostapd Date : October 22, 2012 Affected: 2011. Problem Description: Multiple vulnerabilities has been discovered and corrected in hostapd: hostapd 0.7.3, and...

Mandriva Update for hostapd MDVSA-2012:168 (hostapd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...