Debian DSA-1065-1 : hostapd - missing input sanitising

Matteo Rosi and Leonardo Maccari discovered that hostapd, a wifi network authenticator daemon, performs insufficient boundary checks on a key length value, which might be exploited to crash the service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Mandrake Linux Security Advisory : hostapd (MDKSA-2006:088)

Hostapd 0.3.7 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

[SECURITY] [DSA 1065-1] New hostapd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1065-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2006 http://www.debian.org/security/faq -...

DSA-1065-1 hostapd - missing input sanitising

Bulletin has no description...

[SA19966] Hostapd EAPoL Frame Handling Denial of Service

TITLE: Hostapd EAPoL Frame Handling Denial of Service SECUNIA ADVISORY ID: SA19966 VERIFY ADVISORY: http://secunia.com/advisories/19966/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Hostapd 0.x http://secunia.com/product/9736/ DESCRIPTION: Matteo Rosi has reported a...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

Design/Logic Flaw

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

CVE-2006-2213 affects Hostapd 0.3.7-2. The issue arises from insufficient input validation on a key length value in EAPoL frames (key_data_length), which can be exploited remotely to crash the service (segmentation fault) and cause a denial of service. Debian/Mandriva/SUSE advisories confirm a mi...

CVE-2006-2213: Undefined Security Weakness

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...