[Git][security-tracker-team/security-tracker][master] Add CVE-2025-24912/wpa

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e59d6303 by Salvatore Bonaccorso at 2025-03-13T21:50:48+01:00
Add CVE-2025-24912/wpa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -609,7 +609,9 @@ CVE-2025-27173 (Substance3D - Modeler versions 1.15.0 and earlier are affected b
 CVE-2025-27101 (Opal is OBiBa\u2019s core database application for biobanks or epidemi ...)
 	NOT-FOR-US: Opal
 CVE-2025-24912 (hostapd fails to process crafted RADIUS packets properly. When hostapd ...)
-	TODO: check
+	- wpa <not-affected> (Vulnerable code not present)
+	NOTE: Introduced by: https://w1.fi/cgit/hostap/commit/?id=726432d7622cc0088ac353d073b59628b590ea44
+	NOTE: Fixed by: https://w1.fi/cgit/hostap/commit/?id=339a334551ca911187cc870f4f97ef08e11db109
 CVE-2025-21170 (Substance3D - Modeler versions 1.15.0 and earlier are affected by a NU ...)
 	NOT-FOR-US: Adobe
 CVE-2025-1707 (The Review Schema plugin for WordPress is vulnerable to Local File Inc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e59d6303da5aeb8b4d9467c74096d6c3f156a11c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e59d6303da5aeb8b4d9467c74096d6c3f156a11c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250313/41a47b1a/attachment.htm>