W1.fi: >> Hostapd >> 0.7.3 Security Vulnerabilities
Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service (crash or abort) via a small "TLS Message Length" value in an EAP-TLS message with the "More Fragments" flag set.
CVSS Score
4.3
EPSS Score
0.042
Published
2012-10-10
hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials.
CVSS Score
2.1
EPSS Score
0.004
Published
2012-06-21
Page 4