hostapd RADIUS Packet Processing Vulnerability

A vulnerability exists in hostapd versions through 2.11, where the application improperly handles crafted RADIUS packets. This flaw allows an attacker positioned between the hostapd service and the RADIUS server to inject malicious RADIUS packets, causing authentication processes to fail. This issue arises during the RADIUS authentication of Wi-Fi devices, creating a potential man-in-the-middle attack scenario.

Impact

Exploitation of this vulnerability can lead to forced failures in RADIUS authentication, disrupting the authentication process for Wi-Fi devices.

Remediation

Users are advised to update to the latest version of hostapd, as patches for this vulnerability have been made available by the developer.