Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame.
http://www.securitytracker.com/id?1021362
http://www.securityfocus.com/bid/32694
http://www.securityfocus.com/archive/1/499014/100/0/threaded
http://www.arubanetworks.com/support/alerts/aid-12808.asc