CVE-2015-4144

2015-06-1515:59:00

CWE-119

[email protected]

web.nvd.nist.gov

eap-pwd

server

peer

implementation

hostapd

wpa_supplicant

denial of service

crash

cve-2015-4144

nvd

5.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.024 Low

EPSS

Percentile

89.8%

JSON

The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.

CPENameOperatorVersion
opensuse:opensuseopensuseeq13.1
opensuse:opensuseopensuseeq13.2
w1.fi:hostapdw1.fi hostapdeq1.1
w1.fi:hostapdw1.fi hostapdeq2.4
w1.fi:hostapdw1.fi hostapdeq2.0
w1.fi:hostapdw1.fi hostapdeq1.0
w1.fi:hostapdw1.fi hostapdeq2.3
w1.fi:hostapdw1.fi hostapdeq2.2
w1.fi:hostapdw1.fi hostapdeq2.1
w1.fi:wpa_supplicantw1.fi wpa supplicanteq2.3

CPE	Name	Operator	Version
opensuse:opensuse	opensuse	eq	13.1
opensuse:opensuse	opensuse	eq	13.2
w1.fi:hostapd	w1.fi hostapd	eq	1.1
w1.fi:hostapd	w1.fi hostapd	eq	2.4
w1.fi:hostapd	w1.fi hostapd	eq	2.0
w1.fi:hostapd	w1.fi hostapd	eq	1.0
w1.fi:hostapd	w1.fi hostapd	eq	2.3
w1.fi:hostapd	w1.fi hostapd	eq	2.2
w1.fi:hostapd	w1.fi hostapd	eq	2.1
w1.fi:wpa_supplicant	w1.fi wpa supplicant	eq	2.3