Details

Mathy Vanhoef discovered that wpa_supplicant and hostapd incorrectly

handled WPA2. A remote attacker could use this issue with key

reinstallation attacks to obtain sensitive information. (CVE-2017-13077,

CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,

CVE-2017-13082, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)

Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled

invalid characters in passphrase parameters. A remote attacker could use

this issue to cause a denial of service. (CVE-2016-4476)

Imre Rad discovered that wpa_supplicant and hostapd incorrectly handled

invalid characters in passphrase parameters. A local attacker could use

this issue to cause a denial of service, or possibly execute arbitrary

code. (CVE-2016-4477)