CVE-2017-11670

The CVE-2017-11670 entry concerns eapmd5pass 1.4, where a length validation flaw in extract_eapusername allows an out-of-bounds read/write. A remote attacker could crash the eapmd5pass process by sending specially crafted network traffic. Connected sources (CNVD/NVD) corroborate the remote‑trigge...

CVE-2017-11668

CVE-2017-11668 affects eapmd5pass 1.4. An out-of-bounds read in the assess_packet function (eapmd5pass.c:134) can be triggered by specially crafted network traffic, potentially crashing the eapmd5pass process. Public sources in CNVD/NVD describe the root cause and impact as a crash via network pa...

CVE-2017-11669

CVE-2017-11669 concerns an out-of-bounds read in the function assess_packet (eapmd5pass.c:211) within eapmd5pass 1.4 . A remote attacker can crash the process by sending specially crafted network traffic. The connected CNVD/CNVD-2017-19451 entry corroborates the same flaw in the 1.4 release. No r...