CVE-2012-4445
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.2%
Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service (crash or abort) via a small "TLS Message Length" value in an EAP-TLS message with the "More Fragments" flag set.
Produtos afetados
n/a · n/aReferências
http://osvdb.org/86051http://secunia.com/advisories/50805http://secunia.com/advisories/50888https://exchange.xforce.ibmcloud.com/vulnerabilities/79104http://w1.fi/gitweb/gitweb.cgi?p=hostap.git%3Ba=commitdiff%3Bh=586c446e0ff42ae00315b014924ec669023bd8dehttp://www.debian.org/security/2012/dsa-2557http://www.freebsd.org/security/advisories/FreeBSD-SA-12:07.hostapd.aschttp://www.mandriva.com/security/advisories?name=MDVSA-2012:168http://www.openwall.com/lists/oss-security/2012/10/08/3http://www.pre-cert.de/advisories/PRE-SA-2012-07.txthttp://www.securityfocus.com/bid/55826http://www.securitytracker.com/id?1027808