| Package | Affected versions | Patched versions |
|---|---|---|
| hostapd | < 2.6 | 2.6 |
hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free