CVE-2015-4142
EUVD-2015-416615.06.2015, 15:59
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| w1.fi | wpa_supplicant | 0.7.0 |
| w1.fi | wpa_supplicant | 0.7.1 |
| w1.fi | wpa_supplicant | 0.7.2 |
| w1.fi | wpa_supplicant | 0.7.3 |
| w1.fi | wpa_supplicant | 1.0 |
| w1.fi | wpa_supplicant | 1.1 |
| w1.fi | wpa_supplicant | 2.0 |
| w1.fi | wpa_supplicant | 2.1 |
| w1.fi | wpa_supplicant | 2.2 |
| w1.fi | wpa_supplicant | 2.3 |
| w1.fi | wpa_supplicant | 2.4 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_hpc_node | 6.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| w1.fi | hostapd | 0.7.0 |
| w1.fi | hostapd | 0.7.1 |
| w1.fi | hostapd | 0.7.2 |
| w1.fi | hostapd | 0.7.3 |
| w1.fi | hostapd | 1.0 |
| w1.fi | hostapd | 1.1 |
| w1.fi | hostapd | 2.0 |
| w1.fi | hostapd | 2.1 |
| w1.fi | hostapd | 2.2 |
| w1.fi | hostapd | 2.3 |
| w1.fi | hostapd | 2.4 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| hostapd |
| ||||||||||||||||
| wpa |
| ||||||||||||||||
| wpasupplicant |
|
Common Weakness Enumeration
References