Hostapd 0.3.7-2 allows remote attackers to cause a denial of service (segmentation fault) via an unspecified value in the key_data_length field of an EAPoL frame.
https://exchange.xforce.ibmcloud.com/vulnerabilities/26239
http://www.vupen.com/english/advisories/2006/1657
http://www.securityfocus.com/bid/17846
http://www.mandriva.com/security/advisories?name=MDKSA-2006:088
http://www.debian.org/security/2006/dsa-1065
http://secunia.com/advisories/20265
http://secunia.com/advisories/20195