FreeBSD -- Wi-Fi encryption bypass

Problem Description: The net80211 subsystem would fallback to the multicast key for unicast traffic in the event the unicast key was removed. This would result in buffered unicast traffic being exposed to any stations with access to the multicast key. Impact: As described in the "Framing Frames:...

FreeBSD-SA-23:11.wifi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-23:11.wifi Security Advisory The FreeBSD Project Topic: Wi-Fi encryption bypass Category: core Module: net80211 Announced: 2023-09-06 Credits: See the paper...

Vulnerability of the net80211 kernel subsystem in FreeBSD operating systems, allowing a hacker to execute arbitrary code

The vulnerability in the net80211 kernel subsystem of FreeBSD relates to the lack of proper checking for the length of user data before it is copied into the buffer during 802.11 packet processing. Exploiting this vulnerability allows an attacker to execute arbitrary code...

FreeBSD-SA-22:07.wifi_meshid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:07.wifimeshid Security Advisory The FreeBSD Project Topic: 802.11 heap buffer overflow Category: core Module: net80211 Announced: 2022-04-06 Credits: m00nbsd...

FreeBSD-SA-22:02.wifi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:02.wifi Security Advisory The FreeBSD Project Topic: Multiple WiFi issues Category: core Module: net80211 Announced: 2022-03-15 Affects: FreeBSD 12.x and...

CVE-2006-6332

Stack-based buffer overflow in net80211/ieee80211wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encodeie and giwscancb functions...

CVE-2007-5448

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

CVE-2007-5448: Improper Input Validation

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

CVE-2007-2831

CVE-2007-2831 affects the MadWifi driver prior to 0.9.3.1. Affected code paths are the net80211/ieee80211_wireless.c functions ieee80211_ioctl_getwmmparams and ieee80211_ioctl_setwmmparams, where an oversized negative array index can cause a system crash, potentially expose kernel memory contents...

CVE-2007-2831: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in the 1 ieee80211ioctlgetwmmparams and 2 ieee80211ioctlsetwmmparams functions in net80211/ieee80211wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service system crash, possibly obtain kernel memory contents, and possibly execute arbitrary code via ...

CVE-2006-6332

Stack-based buffer overflow in net80211/ieee80211wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encodeie and giwscancb functions...

CVE-2006-6332: Undefined Security Weakness

Stack-based buffer overflow in net80211/ieee80211wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encodeie and giwscancb functions...

FreeBSD Security Advisory FreeBSD-SA-06:05.80211

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:05.80211 Security Advisory The FreeBSD Project Topic: IEEE 802.11 buffer overflow Category: core Module: net80211 Announced: 2006-01-18 Credits: Karl Janmar...

FreeBSD-SA-06:05.80211

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:05.80211 Security Advisory The FreeBSD Project Topic: IEEE 802.11 buffer overflow Category: core Module: net80211 Announced: 2006-01-18 Credits: Karl Janmar...