SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

[3.4] wpa_supplicant: security vulnerabilities (CVE-2016-4476, CVE-2016-4477)

ID: oval:org.secpod.oval:def:1800572	Date: (C)2018-03-28 (M)2023-12-20
Class: PATCH	Family: unix

CVE-2016-4476 : denial of service via crafted WPA/WPA2 passphrase parameter. wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service via a crafted WPS operation.

Platform:

Alpine Linux 3.4

Product:

wpa_supplicant

Reference:

5638

CVE-2016-4476

CVE-2016-4477


30479



423868



248392



909



195452



282