Auto_EAP

AutoEAP はじめに 2016年9月15日公開 AutoEAP.pyは、様々な種類のEAPネットワークに対して自動化されたブルートフォース認証攻撃を実行するように設計されたスクリプトです。これらの種類の無線ネットワークは、RADIUSサーバーがActive Directoryに対して認証をチェックする際に、ドメイン認証情報のパスワード推測を容易にするインターフェースを提供します。Jouni Malinen [email protected]...

CVE-2019-6203-PoC

CVE-2019-6203-PoC すべてのAppleデバイスにPEAPのバグが存在し、攻撃者がAppleデバイス（iOS、macOS、tvOS）を悪意のあるアクセスポイントに強制的に接続させることが可能です。 これはCVE-2019-6203のPoCで、iOS 12.2未満、macOS 10.14.4未満で動作し、Kali Linux上でテスト済みです。 このPoCを実行するには、APモード をサポートするWi-Fiカードが必要です。これはiw listを実行して確認できます。出力例： Supported interface modes: IBSS managed AP AP/VLAN...

AlmaLinux 9.2 [TuxCare] Security Update: wpa_supplicant (ALMALINUX9.2:CLSA-2025:1753802388)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753802388 advisory. - The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be...

OESA-2026-4116 ppp security update

The Point-to-Point Protocol PPP provides a standard way to establish a network connection over a serial link. At present, this package supports IP and IPV6 and the protocols layered above them, such as TCP and UDP. The Linux port of this package also has support for IPX. Security Fixes: The code ...

DEBIAN-CVE-2026-75883

The code in pppd that formats a response to a PEAP Request packet in peapresponse copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacketbuf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting to...

CVE-2026-75883 PPPD buffer overflow in PEAP response code

The code in pppd that formats a response to a PEAP Request packet in peapresponse copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacketbuf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting to...

CVE-2026-75883 PPPD buffer overflow in PEAP response code

The code in pppd that formats a response to a PEAP Request packet in peapresponse copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacketbuf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting to...

CVE-2026-75883

CVE-2026-75883 is a buffer overflow in pppd 's peap_response() function, where up to 16384 bytes of a TLS record are copied into the fixed-size global buffer outpacket_buf without bounds checking or outgoing PEAP fragmentation. A pppd process connecting to a server that requests PEAP authenticati...

PT-2026-99964

The code in pppd that formats a response to a PEAP Request packet in peap response copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket buf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting ...

CVE-2026-75883: Heap-based Buffer Overflow

The code in pppd that formats a response to a PEAP Request packet in peapresponse copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacketbuf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting to...

PT-2026-95455

Name of the Vulnerable Software and Affected Versions pppd affected versions not specified Description An issue exists in the peap response function where a response to a PEAP Request packet is formatted by copying a TLS record of up to 16384 bytes into the fixed global buffer outpacket buf. This...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2024-003818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003818 advisory. The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

DEBIAN-CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

AZL-100034 CVE-2026-78134 affecting package strongswan for versions less than 5.9.14-11

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan versions 4.5.0 through 6.0.7 contain an Incorrect Access Control vulnerability in the eap-ttls and eap-peap plugins caused by missing or mismatched inner EAP identity authentication details. This can result in incorrect identity binding and a potential authorization bypass . The CVSS 3...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

EUVD-2026-75920

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...