CVE-2017-11669
HighSummary
An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.
Risk Assessment
This vulnerability could lead to service downtime, affecting the organization's operational continuity. Potential attacks can be conducted remotely, increasing the risk.
Recommendation
It is recommended to update to the latest version of eapmd5pass to mitigate this vulnerability. Additionally, monitoring network traffic for potential attack attempts is advised.
Other vulnerabilities in eapmd5pass 1.4
See all- CVE-2017-11670High
A length validation flaw in eapmd5pass 1.4 leads to out-of-bounds read and write. A remote attacker could exploit this flaw to crash the eapmd5pass process by generating specially crafted network traffic.
- CVE-2017-11668High
An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.
Original NVD description (English source)
An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.