Summary
USN-3969-1 fixed a vulnerability in wpa_supplicant and hostapd. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that wpa_supplicant and hostapd incorrectly handled
unexpected fragments when using EAP-pwd. A remote attacker could possibly
use this issue to cause a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | wpa | 2.1-0ubuntu1.7+esm1 |
Vulnerabilities 1
-
Unscored —
The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validat…
References
-
report
https://ubuntu.com/security/CVE-2019-11555