What’s Vulnerable › Vulnerabilities

CVE-2017-11668

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-07-31 · updated 2026-06-17
• Weakness: CWE-125

Description

An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.

Affected products

• Eapmd5Pass Project Eapmd5Pass: 1.4

References

• http://openwall.com/lists/oss-security/2017/07/31/3
• http://openwall.com/lists/oss-security/2017/07/31/3

Get alerted when CVE-2017-11668 or the next vulnerability affects your stack