]> git.ipfire.org Git - thirdparty/hostap.git/commit
WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use
authorJouni Malinen <j@w1.fi>
Sun, 25 Oct 2015 13:45:50 +0000 (15:45 +0200)
committerJouni Malinen <j@w1.fi>
Tue, 10 Nov 2015 16:40:54 +0000 (18:40 +0200)
commit2cb28a4c75bd2b5d6a56f43e13bff52a2d12bc13
treeed874b26cfb8882f3cb4d80dd490f58b3d169616
parentd0f56772ea822156825f64b5e7a5e214afd2a918
WNM: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use

WNM Sleep Mode Response frame is used to update GTK/IGTK only if PMF is
enabled. Verify that PMF is in use before using this field on station
side to avoid accepting unauthenticated key updates. (CVE-2015-5310)

Signed-off-by: Jouni Malinen <j@w1.fi>
wpa_supplicant/wnm_sta.c