CVE-2016-4476 in hostapd
요약 (영어)
hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2016. 05. 03.
공개
2016. 05. 09.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 87124 | hostapd/wpa_supplicant WPS Operation 권한 상승 | 20 | 정의되지 않음 | 공식 수정 | CVE-2016-4476 |