diff options
| author | Felix Fietkau <nbd@openwrt.org> | 2016-01-10 17:03:37 +0000 |
|---|---|---|
| committer | Felix Fietkau <nbd@openwrt.org> | 2016-01-10 17:03:37 +0000 |
| commit | 2784b43ed6227ed911ea7864f1293da20761689a (patch) | |
| tree | fc3390bae0e38d6ec93efd07668ea859aa174f31 /docs | |
| parent | 48dbec9e8261af11d37359a988c30904f4bf30bd (diff) | |
| download | master-187ad058-2784b43ed6227ed911ea7864f1293da20761689a.tar.gz master-187ad058-2784b43ed6227ed911ea7864f1293da20761689a.tar.bz2 master-187ad058-2784b43ed6227ed911ea7864f1293da20761689a.zip | |
hostapd: fix post v2.4 security issues
- WPS: Fix HTTP chunked transfer encoding parser (CVE-2015-4141)
- EAP-pwd peer: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd server: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd peer: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd server: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd peer: Fix asymmetric fragmentation behavior (CVE-2015-4146)
- NFC: Fix payload length validation in NDEF record parser (CVE-2015-8041)
- WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use
(CVE-2015-5310)
- EAP-pwd peer: Fix last fragment length validation (CVE-2015-5315)
- EAP-pwd server: Fix last fragment length validation (CVE-2015-5314)
- EAP-pwd peer: Fix error path for unexpected Confirm message (CVE-2015-5316)
Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@48185 3c298f89-4303-0410-b956-a3cf2f4a3e73
Diffstat (limited to 'docs')
0 files changed, 0 insertions, 0 deletions