CVE-2016-4476 in hostapd
Résumé (Anglaise)
hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
Réserver
03/05/2016
Divulgation
09/05/2016
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 87124 | hostapd/wpa_supplicant WPS Operation élévation de privilèges | 20 | Non défini | Correctif officiel | CVE-2016-4476 |