CVE-2012-4445

Published: Oct 10, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service (crash or abort) via a small "TLS Message Length" value in an EAP-TLS message with the "More Fragments" flag set.

Affected (13)

Products: W1.fi: Hostapd

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
W1.fi Hostapd	Version 0.6.0
W1.fi Hostapd	Version 0.6.1
W1.fi Hostapd	Version 0.6.2
W1.fi Hostapd	Version 0.6.3
W1.fi Hostapd	Version 0.6.4
W1.fi Hostapd	Version 0.6.5
W1.fi Hostapd	Version 0.6.6
W1.fi Hostapd	Version 0.6.7
W1.fi Hostapd	Version 0.7.0
W1.fi Hostapd	Version 0.7.1
W1.fi Hostapd	Version 0.7.2
W1.fi Hostapd	Version 0.7.3
W1.fi Hostapd	Version 1.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

http://osvdb.org/86051

Source: secalert@redhat.com

http://secunia.com/advisories/50805

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/50888

Source: secalert@redhat.com

Vendor Advisory

http://w1.fi/gitweb/gitweb.cgi?p=hostap.git%3Ba=commitdiff%3Bh=586c446e0ff42ae00315b014924ec669023bd8de

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2557

Source: secalert@redhat.com

http://www.freebsd.org/security/advisories/FreeBSD-SA-12:07.hostapd.asc

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2012:168

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/10/08/3

Source: secalert@redhat.com

http://www.pre-cert.de/advisories/PRE-SA-2012-07.txt

Source: secalert@redhat.com

http://www.securityfocus.com/bid/55826

Source: secalert@redhat.com

http://www.securitytracker.com/id?1027808

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/79104

Source: secalert@redhat.com

http://osvdb.org/86051

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50805

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/50888

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://w1.fi/gitweb/gitweb.cgi?p=hostap.git%3Ba=commitdiff%3Bh=586c446e0ff42ae00315b014924ec669023bd8de

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2557

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.freebsd.org/security/advisories/FreeBSD-SA-12:07.hostapd.asc

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2012:168

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/10/08/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.pre-cert.de/advisories/PRE-SA-2012-07.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/55826

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1027808

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/79104

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.