File
|
Last Change |
|---|---|
release/
|
9816 (6 years ago) by laffer1: 0.8.7 release |
|
stable/
|
9844 (5 years ago) by laffer1: fix double free |
|
svnadmin/
|
6424 (10 years ago) by laffer1: set props |
|
trunk/
|
12007 (5 years ago) by root: When using WPA2, EAPOL-Key frames with the Encrypted flag and without the MIC flag set, the data field was decrypted first without verifying the MIC. When the dta field was encrypted using RC4, for example, when negotiating TKIP as a pairwise cipher, the unauthenticated but decrypted data was subsequently processed. This opened wpa_supplicant(8) to abuse by decryption and recovery of sensitive information contained in EAPOL-Key messages. See https://w1.fi/security/2018-1/unauthenticated-eapol-key-decryption.txt for a detailed description of the bug. Obtained from: FreeBSD |
|
vendor/
|
11602 (5 years ago) by laffer1: tag 2.2.0 |
|
vendor-crypto/
|
11606 (5 years ago) by laffer1: tag 1.0.1u |