CVE-2015-5316

The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
w1.fiwpa_supplicant
2.0 ≤
𝑥
< 2.6
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
wpa
bullseye (security)
2:2.9.0-21+deb11u2
fixed
bullseye
2:2.9.0-21+deb11u2
fixed
wheezy
not-affected
bookworm
2:2.10-12+deb12u2
fixed
bookworm (security)
2:2.10-12+deb12u2
fixed
sid
2:2.10-22
fixed
trixie
2:2.10-22
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wpa
wily
Fixed 2.4-0ubuntu3.2
released
vivid
not-affected
trusty
not-affected
precise
dne
wpasupplicant
wily
dne
vivid
dne
trusty
dne
precise
not-affected
Common Weakness Enumeration
References
http://w1.fi/security/2015-8/eap-pwd-unexpected-confirm.txt
http://www.openwall.com/lists/oss-security/2015/11/10/11
http://www.securityfocus.com/bid/77538
http://www.ubuntu.com/usn/USN-2808-1
https://www.debian.org/security/2015/dsa-3397
http://w1.fi/security/2015-8/eap-pwd-unexpected-confirm.txt
http://www.openwall.com/lists/oss-security/2015/11/10/11
http://www.securityfocus.com/bid/77538
http://www.ubuntu.com/usn/USN-2808-1
https://www.debian.org/security/2015/dsa-3397