Approved changes feed: RSS · Atom

cpe:2.3:a:eapmd5pass_project:eapmd5pass:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

VendorEapmd5Pass Project (0d5a94ae-6b53-532e-96ff-46a4e403d3ab)
ProductEapmd5Pass (18fc9bf6-fbe5-5ad6-bdf2-8c3acb0bdaf2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/joswr1ght/eapmd5pass purl2cpe 2026-06-01 10:17:45.180002
pkg:gitlab/kalilinux/eapmd5pass purl2cpe 2026-06-01 10:17:45.180005
pkg:rpm/opensuse/eapmd5pass purl2cpe 2026-06-01 10:17:45.180007

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11670 vulnerable 2026-06-08 05:08:38.303897 Details available
A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername function. A remote attacker could potentially use this flaw to crash the eapmd5pass process by generating specially crafted network traffic.
Published: 2017-07-31T17:00:00.000Z
Updated: 2024-08-05T18:12:40.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11669 vulnerable 2026-06-08 05:08:38.303589 Details available
An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.
Published: 2017-07-31T17:00:00.000Z
Updated: 2024-08-05T18:12:40.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11668 vulnerable 2026-06-08 05:08:38.303204 Details available
An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets. A remote attacker could potentially use this flaw to crash the eapmd5pass process under certain circumstances by generating specially crafted network traffic.
Published: 2017-07-31T17:00:00.000Z
Updated: 2024-08-05T18:12:40.689Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.