Felix Fietkau
6c40914c0c
hostapd: fix post v2.4 security issues
- WPS: Fix HTTP chunked transfer encoding parser (CVE-2015-4141)
- EAP-pwd peer: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd server: Fix payload length validation for Commit and Confirm
(CVE-2015-4143)
- EAP-pwd peer: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd server: Fix Total-Length parsing for fragment reassembly
(CVE-2015-4144, CVE-2015-4145)
- EAP-pwd peer: Fix asymmetric fragmentation behavior (CVE-2015-4146)
- NFC: Fix payload length validation in NDEF record parser (CVE-2015-8041)
- WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use
(CVE-2015-5310)
- EAP-pwd peer: Fix last fragment length validation (CVE-2015-5315)
- EAP-pwd server: Fix last fragment length validation (CVE-2015-5314)
- EAP-pwd peer: Fix error path for unexpected Confirm message (CVE-2015-5316)
Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>
SVN-Revision: 48185
2016-01-10 17:03:37 +00:00
..
2015-11-24 18:28:35 +00:00
2015-12-23 14:43:41 +00:00
2015-09-24 08:37:40 +00:00
2015-10-15 22:12:13 +00:00
2016-01-10 17:03:37 +00:00
2015-09-26 23:27:23 +00:00
2015-12-23 14:44:05 +00:00
2016-01-04 15:11:49 +00:00
2015-11-19 11:49:21 +00:00
2015-10-26 09:01:48 +00:00
2016-01-07 21:08:05 +00:00
2015-09-15 14:52:47 +00:00
2016-01-04 15:13:17 +00:00
2016-01-05 10:42:52 +00:00
2016-01-04 15:12:21 +00:00