Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

Debian: DSA-3052-1 Critical: WPA Input Sanitization Code Execution

debian
Calendar Grey October 16, 2014
Debian Logo
A vulnerability identified in wpa tools regarding input handling may permit code execution; ensure to update your wpa packages immediately.
Jouni Malinen discovered an input sanitization issue in the wpa_cli and hostapd_cli tools included in the wpa package

Summary

For the stable distribution (wheezy), this problem has been fixed in
version 1.0-3+deb7u1.

For the testing distribution (jessie), this problem will be fixed soon.

For the unstable distribution (sid), this problem has been fixed in
version 2.3-1.

We recommend that you upgrade your wpa packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: wpa
CVE ID: CVE-2014-3686

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here