oss-security - Re: hostapd/wpa_supplicant - Incomplete WPS and P2P NFC NDEF record payload length validation

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20151030185832.GA21456@eldamar.local>
Date: Fri, 30 Oct 2015 19:58:32 +0100
From: Salvatore Bonaccorso <carnil@...ian.org>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: Re: hostapd/wpa_supplicant - Incomplete WPS and P2P
 NFC NDEF record payload length validation

Hi,

On Sun, Aug 16, 2015 at 03:19:53PM +0200, Moritz Muehlenhoff wrote:
> Hi,
> This doesn't seem to have received a CVE assignment, explicitly
> adding cve-assign to CC.
> 
> Cheers,
>         Moritz
> 
> On Wed, Jul 08, 2015 at 05:48:53PM +0300, Jouni Malinen wrote:
> > Incomplete WPS and P2P NFC NDEF record payload length validation
> > 
> > Published: July 8, 2015
> > The latest version available from: http://w1.fi/security/2015-5/
[...]

Can a CVE be assigned for the hostapd/wpa_supplicant issue from
http://w1.fi/security/2015-5/ as well?

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.