[PATCH] ndiswrapper remote buffer overflows on long ESSIDs
Bug #275860 reported by
Anders Kaseorg
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ndiswrapper |
Fix Released
|
Undecided
|
Unassigned | ||
linux (Ubuntu) |
Fix Released
|
Low
|
Ubuntu Kernel Team | ||
linux-ubuntu-modules-2.6.24 (Ubuntu) |
Fix Released
|
Low
|
Ubuntu Kernel Team | ||
ndiswrapper (Debian) |
Fix Released
|
Unknown
|
|||
ndiswrapper (Gentoo Linux) |
Fix Released
|
High
|
Bug Description
I managed to configure an iMac to export an ad-hoc wireless network with a 32-character ESSID (this seems to be a Mac UI bug). Every time I connected to it using my intrepid amd64 laptop running ndiswrapper, I immediately began seeing kernel oopses, panics, freezes, etc. The same happened with the hardy kernel. I tracked the problem down to a collection of buffer overflows in ndiswrapper on 32-character ESSIDs.
Attached is a patch for the intrepid tree that fixes these issues and allows me to connect without problems.
CVE References
Changed in linux: | |
assignee: | nobody → ubuntu-kernel-team |
importance: | Undecided → Medium |
status: | New → Triaged |
Changed in linux-ubuntu-modules-2.6.24: | |
assignee: | nobody → ubuntu-kernel-team |
status: | New → Triaged |
Changed in linux: | |
importance: | Medium → Low |
milestone: | ubuntu-8.10-beta → ubuntu-8.10 |
Changed in linux-ubuntu-modules-2.6.24: | |
importance: | Undecided → Low |
Changed in ndiswrapper: | |
status: | Unknown → Confirmed |
Changed in ndiswrapper: | |
status: | Confirmed → Fix Released |
Changed in linux: | |
status: | Fix Released → Confirmed |
status: | Confirmed → Fix Released |
Changed in ndiswrapper: | |
status: | Fix Released → Fix Committed |
Changed in ndiswrapper (Gentoo Linux): | |
importance: | Unknown → High |
Changed in ndiswrapper (Debian): | |
status: | Unknown → Fix Released |
To post a comment you must log in.
Is your patch inverted?