Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-4141HistoryJun 15, 2015 - 3:59 p.m.
CVE-2015-4141
2015-06-1515:59:00
Debian Security Bug Tracker
security-tracker.debian.org
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.028 Low
EPSS
Percentile
90.5%
The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wpa | < 2.3-2.2 | wpa_2.3-2.2_all.deb |
| Debian | 11 | all | wpa | < 2.3-2.2 | wpa_2.3-2.2_all.deb |
| Debian | 10 | all | wpa | < 2.3-2.2 | wpa_2.3-2.2_all.deb |
| Debian | 999 | all | wpa | < 2.3-2.2 | wpa_2.3-2.2_all.deb |
| Debian | 13 | all | wpa | < 2.3-2.2 | wpa_2.3-2.2_all.deb |
Related
ubuntucve
ubuntucve
CVE-2015-4141
2015-06-01 00:00:00
cve
cve
CVE-2015-4141
2015-06-15 15:59:00
prion
prion
Heap overflow
2015-06-15 15:59:00
nessus
nessus
SUSE SLED11 / SLES11 Security Update : wpa_supplicant (SUSE-SU-2015:2221-1)
2015-12-09 00:00:00
openSUSE Security Update : wpa-supplicant (openSUSE-2015-411)
2015-06-15 00:00:00
openSUSE Security Update : wpa_supplicant (openSUSE-2016-1104)
2016-09-26 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:2221-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2305-1)
2021-04-19 00:00:00
Ubuntu: Security Advisory (USN-2650-1)
2015-06-17 00:00:00
ubuntu
ubuntu
wpa_supplicant and hostapd vulnerabilities
2015-06-16 00:00:00
archlinux
archlinux
hostapd: denial of service
2015-10-05 00:00:00
freebsd
freebsd
hostapd and wpa_supplicant -- multiple vulnerabilities
2015-05-04 00:00:00
securityvulns
securityvulns
[USN-2650-1] wpa_supplicant and hostapd vulnerabilities
2015-06-21 00:00:00
wpa_supplicant multiple security vulnerabilities
2015-06-21 00:00:00
gentoo
gentoo
hostapd and wpa_supplicant: Multiple vulnerabilities
2016-06-27 00:00:00
debian
debian
[SECURITY] [DSA 3397-1] wpa security update
2015-11-10 20:08:26
[SECURITY] [DSA 3397-1] wpa security update
2015-11-10 20:08:26
osv
osv
wpa - security update
2015-11-10 00:00:00
suse
suse
Security update for hostapd (important)
2017-10-28 00:18:34
Security update for wpa_supplicant (moderate)
2020-11-26 00:00:00
Security update for wpa_supplicant (moderate)
2020-11-27 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.028 Low
EPSS
Percentile
90.5%
Related for DEBIANCVE:CVE-2015-4141