| Package | Affected versions | Patched versions |
|---|---|---|
| hostapd | = 0.6.0= 0.6.1= 0.6.2= 0.6.3= 0.6.4= 0.6.5= 0.6.6= 0.6.7= 0.7.0= 0.7.1= 0.7.2= 0.7.3= 1.0 |
Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service (crash or abort) via a small "TLS Message Length" value in an EAP-TLS message with the "More Fragments" flag set.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free