high7.5
CVE-2016-4476
hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to ca…
Impact
hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| W1.Fi | Hostapd | from 0.6.7 through 2.5 |
| W1.Fi | Wpa Supplicant | from 0.6.7 through 2.5 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 17.04 |