What’s Vulnerable › Vulnerabilities

CVE-2017-11670

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-07-31 · updated 2026-06-17
• Weakness: CWE-125

Description

A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic.

Affected products

• Eapmd5Pass Project Eapmd5Pass: 1.4

References

• http://openwall.com/lists/oss-security/2017/07/31/3
• http://openwall.com/lists/oss-security/2017/07/31/3

Get alerted when CVE-2017-11670 or the next vulnerability affects your stack