Mathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly handled WPA2. A remote attacker could use this issue with key reinstallation attacks to obtain sensitive information. (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)
Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase parameters. A remote attacker could use this issue to cause a denial of service. (CVE-2016-4476)
Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled invalid characters in passphrase parameters. A local attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2016-4477)
{ "availability": "No subscription required", "binaries": [ { "hostapd-dbgsym": "1:2.1-0ubuntu1.5", "wpasupplicant-udeb": "2.1-0ubuntu1.5", "wpagui-dbgsym": "2.1-0ubuntu1.5", "hostapd": "1:2.1-0ubuntu1.5", "wpagui": "2.1-0ubuntu1.5", "wpasupplicant": "2.1-0ubuntu1.5", "wpasupplicant-udeb-dbgsym": "2.1-0ubuntu1.5", "wpasupplicant-dbgsym": "2.1-0ubuntu1.5" } ] }
{ "availability": "No subscription required", "binaries": [ { "hostapd-dbgsym": "1:2.4-0ubuntu6.2", "wpasupplicant-udeb": "2.4-0ubuntu6.2", "wpagui-dbgsym": "2.4-0ubuntu6.2", "hostapd": "1:2.4-0ubuntu6.2", "wpagui": "2.4-0ubuntu6.2", "wpasupplicant": "2.4-0ubuntu6.2", "wpasupplicant-udeb-dbgsym": "2.4-0ubuntu6.2", "wpasupplicant-dbgsym": "2.4-0ubuntu6.2" } ] }