CVE-2017-11670
HighSummary
A length validation flaw in eapmd5pass 1.4 leads to out-of-bounds read and write. A remote attacker could exploit this flaw to crash the eapmd5pass process by generating specially crafted network traffic.
Risk Assessment
The organization may be vulnerable to attacks that could lead to the eapmd5pass service crashing, affecting system availability.
Recommendation
It is recommended to update to the latest version of eapmd5pass to mitigate this vulnerability and to monitor network traffic for potential attacks.
Other vulnerabilities in eapmd5pass 1.4
See all- CVE-2017-11669High
An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.
- CVE-2017-11668High
An out-of-bounds read flaw in eapmd5pass 1.4 related to the assess_packet function could lead to a crash of the eapmd5pass process. A remote attacker could exploit this flaw by generating specially crafted network traffic.
Original NVD description (English source)
A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic.