Technical Description

A vulnerability has been identified in Mandriva, which could be exploited by remote attackers to cause a denial of service. This issue is caused by a stack overflow error in "driver_wext.c" in wpa_supplicant when processing specially crafted TSF data, which could be exploited by remote attackers to crash a vulnerable application, creating a denial of service condition.

Affected Products

Mandriva Linux 2008.0

Solution

Upgrade the affected packages :

Mandriva Linux 2008.0:
80c2dc52d42fb324f6ff90fcfe02b9fa 2008.0/i586/wpa_gui-0.6.0-1.1mdv2008.0.i586.rpm
0ec22d8e71719af986748a86ee4063ce 2008.0/i586/wpa_supplicant-0.6.0-1.1mdv2008.0.i586.rpm
18581ca13cf1758016bfaf52a0ea4992 2008.0/SRPMS/wpa_supplicant-0.6.0-1.1mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
677b536c2f630585c2df72a832aee497 2008.0/x86_64/wpa_gui-0.6.0-1.1mdv2008.0.x86_64.rpm
0c87ce95a9432518480ccdc7eed168bb 2008.0/x86_64/wpa_supplicant-0.6.0-1.1mdv2008.0.x86_64.rpm
18581ca13cf1758016bfaf52a0ea4992 2008.0/SRPMS/wpa_supplicant-0.6.0-1.1mdv2008.0.src.rpm

References

http://www.vupen.com/english/advisories/2007/4221
http://archives.mandrivalinux.com/security-announce/2007-12/msg00014.php

ChangeLog

2007-12-14 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.