191 matches found
CVE-2019-6203-PoC
CVE-2019-6203-PoC There is a PEAP bug in all Apple devices that would allow an attacker to force any Apple device iOS, macOS or tvOS to associate with a malicious access point. This is a PoC for CVE-2019-6203, works on iOS 12.2, macOS 10.14.4, tested on Kali Linux. You need a Wi-Fi card that...
Auto_EAP
AutoEAP Introduction Published Sepetember 15, 2016 AutoEAP.py is a script designed to perform automated brute-force authentication attacks against various types of EAP networks. These types of wireless networks provide an interface to facilitate password guessing of domain credentials as radius...
CVE-2026-122116
A flaw was found in Yealink terminal devices. An improper access control vulnerability in the Wi-Fi 802.1X Protected Extensible Authentication Protocol PEAP configuration allows unauthorized users to access network settings without administrative privileges. An attacker can exploit this issue to...
CVE-2026-122116
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed...
EUVD-2026-117010
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed...
CVE-2026-122116
Certain Yealink terminal devices released before 2026-04-21 are impacted by an improper access control vulnerability within the Wi-Fi 802.1X PEAP network configuration function. This flaw allows unauthorized users to access deployed 802.1X network access authentication credentials . To remediate ...
CVE-2026-122116
Certain Yealink terminal devices before 2026-04-21 contain an improper access control vulnerability in the Wi-Fi 802.1X PEAP network configuration function. This flaw exposes deployed 802.1X network access authentication credentials to unauthorized users. The latest Yealink firmware has addressed...
CVE-2026-75883
A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specially crafted PEAP Request packet, an attacker could cause the pppd process to corrupt global static data, leading to incorrect behavior or a system crash...
AlmaLinux 9.2 [TuxCare] Security Update: wpa_supplicant (ALMALINUX9.2:CLSA-2025:1753802388)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753802388 advisory. - The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be...
OESA-2026-4116 ppp security update
The Point-to-Point Protocol PPP provides a standard way to establish a network connection over a serial link. At present, this package supports IP and IPV6 and the protocols layered above them, such as TCP and UDP. The Linux port of this package also has support for IPX. Security Fixes: The code ...
DEBIAN-CVE-2026-75883
A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specially crafted PEAP Request packet, an attacker could cause the pppd process to corrupt global static data, leading to incorrect behavior or a system crash...
CVE-2026-75883 Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.
A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specially crafted PEAP Request packet, an attacker could cause the pppd process to corrupt global static data, leading to incorrect behavior or a system crash...
CVE-2026-75883 Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service.
A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specially crafted PEAP Request packet, an attacker could cause the pppd process to corrupt global static data, leading to incorrect behavior or a system crash...
CVE-2026-75883
CVE-2026-75883 is a buffer overflow in pppd 's peap_response() function, where up to 16384 bytes of a TLS record are copied into the fixed-size global buffer outpacket_buf without bounds checking or outgoing PEAP fragmentation. A pppd process connecting to a server that requests PEAP authenticati...
PT-2026-99964
The code in pppd that formats a response to a PEAP Request packet in peap response copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacket buf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting ...
CVE-2026-75883: Heap-based Buffer Overflow
The code in pppd that formats a response to a PEAP Request packet in peapresponse copies an entire TLS record of up to 16384 bytes into the fixed global buffer outpacketbuf without checking the available space and without implementing outgoing PEAP fragmentation. Thus a pppd process connecting to...
PT-2026-95455
Name of the Vulnerable Software and Affected Versions pppd affected versions not specified Description An issue exists in the peap response function where a response to a PEAP Request packet is formatted by copying a TLS record of up to 16384 bytes into the fixed global buffer outpacket buf. This...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2024-003818)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003818 advisory. The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the...