Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
hostapd 缓冲区错误漏洞
Vulnerability Description
hostapd是一个实现了无线接入点（AP）和认证服务器的守护进程。 hostapd 2.6之前的2.x版本中的eap_server/eap_server_pwd.c文件的‘eap_pwd_process’函数存在安全漏洞，该漏洞源于网络配置文件中的EAP-pwd被启用时，程序没有检测重组缓冲区是否可以容下最后的片段。远程攻击者可借助EAP-pwd消息中较大的末尾片段利用该漏洞造成拒绝服务（进程终止）。
CVSS Information
N/A
Vulnerability Type
N/A