hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "hostapd", "binary_version": "1:2.1-0ubuntu1.5" }, { "binary_name": "hostapd-dbgsym", "binary_version": "1:2.1-0ubuntu1.5" }, { "binary_name": "wpagui", "binary_version": "2.1-0ubuntu1.5" }, { "binary_name": "wpagui-dbgsym", "binary_version": "2.1-0ubuntu1.5" }, { "binary_name": "wpasupplicant", "binary_version": "2.1-0ubuntu1.5" }, { "binary_name": "wpasupplicant-dbgsym", "binary_version": "2.1-0ubuntu1.5" }, { "binary_name": "wpasupplicant-udeb", "binary_version": "2.1-0ubuntu1.5" }, { "binary_name": "wpasupplicant-udeb-dbgsym", "binary_version": "2.1-0ubuntu1.5" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "hostapd", "binary_version": "1:2.4-0ubuntu6.2" }, { "binary_name": "hostapd-dbgsym", "binary_version": "1:2.4-0ubuntu6.2" }, { "binary_name": "wpagui", "binary_version": "2.4-0ubuntu6.2" }, { "binary_name": "wpagui-dbgsym", "binary_version": "2.4-0ubuntu6.2" }, { "binary_name": "wpasupplicant", "binary_version": "2.4-0ubuntu6.2" }, { "binary_name": "wpasupplicant-dbgsym", "binary_version": "2.4-0ubuntu6.2" }, { "binary_name": "wpasupplicant-udeb", "binary_version": "2.4-0ubuntu6.2" }, { "binary_name": "wpasupplicant-udeb-dbgsym", "binary_version": "2.4-0ubuntu6.2" } ] }
{ "ubuntu_priority": "low", "availability": "No subscription required", "binaries": [ { "binary_name": "hostapd", "binary_version": "1:2.4-0ubuntu10" }, { "binary_name": "hostapd-dbgsym", "binary_version": "1:2.4-0ubuntu10" }, { "binary_name": "wpagui", "binary_version": "2.4-0ubuntu10" }, { "binary_name": "wpagui-dbgsym", "binary_version": "2.4-0ubuntu10" }, { "binary_name": "wpasupplicant", "binary_version": "2.4-0ubuntu10" }, { "binary_name": "wpasupplicant-dbgsym", "binary_version": "2.4-0ubuntu10" }, { "binary_name": "wpasupplicant-udeb", "binary_version": "2.4-0ubuntu10" } ] }