DSA-1065-1 hostapd - missing input sanitising

Bulletin has no description...

[SA19966] Hostapd EAPoL Frame Handling Denial of Service

TITLE: Hostapd EAPoL Frame Handling Denial of Service SECUNIA ADVISORY ID: SA19966 VERIFY ADVISORY: http://secunia.com/advisories/19966/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Hostapd 0.x http://secunia.com/product/9736/ DESCRIPTION: Matteo Rosi has reported a...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

Design/Logic Flaw

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

CVE-2006-2213 affects Hostapd 0.3.7-2. The issue arises from insufficient input validation on a key length value in EAPoL frames (key_data_length), which can be exploited remotely to crash the service (segmentation fault) and cause a denial of service. Debian/Mandriva/SUSE advisories confirm a mi...