Description (CNA)
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jouni Malinen / hostapd | affected 2.11 and earlier |
CWE
CWE-826
References
- https://w1.fi/hostapd/
- https://w1.fi/cgit/hostap/commit/?id=726432d7622cc0088ac353d073b59628b590ea44
- https://w1.fi/cgit/hostap/commit/?id=339a334551ca911187cc870f4f97ef08e11db109
- https://jvn.jp/en/jp/JVN19358384/
ADP enrichment
No English description supplied.
No references supplied.