CVE-2016-4476 in hostapd
Resumen (Inglés)
hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
Reservar
2016-05-03
Divulgación
2016-05-09
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 87124 | hostapd/wpa_supplicant WPS Operation escalada de privilegios | 20 | No está definido | Arreglo oficial | CVE-2016-4476 |