Nessus Plugin #17127

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200502-22] wpa_supplicant: Buffer overflow vulnerability

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2005 Michel Arboi

Summary:

wpa_supplicant: Buffer overflow vulnerability

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

GLSA:200502-22

Description:

The remote host is affected by the vulnerability described in GLSA-200502-22
(wpa_supplicant: Buffer overflow vulnerability)


wpa_supplicant contains a possible buffer overflow due to the
lacking validation of received EAPOL-Key frames.

Impact

An attacker could cause the crash of wpa_supplicant using a
specially crafted packet.

Workaround

There is no known workaround at this time.

References:
http://lists.shmoo.com/pipermail/hostap/2005-February/009465.html


Solution:
All wpa_supplicant users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-wireless/wpa_supplicant-0.2.7"


Risk factor : Medium