CVE-2015-5315

2018-02-2116:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.017 Low

EPSS

Percentile

87.6%

JSON

The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.

OSVersionArchitecturePackageVersionFilename
Debian12allwpa< 2.3-2.3wpa_2.3-2.3_all.deb
Debian11allwpa< 2.3-2.3wpa_2.3-2.3_all.deb
Debian10allwpa< 2.3-2.3wpa_2.3-2.3_all.deb
Debian999allwpa< 2.3-2.3wpa_2.3-2.3_all.deb
Debian13allwpa< 2.3-2.3wpa_2.3-2.3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wpa	< 2.3-2.3	wpa_2.3-2.3_all.deb
Debian	11	all	wpa	< 2.3-2.3	wpa_2.3-2.3_all.deb
Debian	10	all	wpa	< 2.3-2.3	wpa_2.3-2.3_all.deb
Debian	999	all	wpa	< 2.3-2.3	wpa_2.3-2.3_all.deb
Debian	13	all	wpa	< 2.3-2.3	wpa_2.3-2.3_all.deb

0.017 Low

EPSS

Percentile

87.6%

JSON

Related for DEBIANCVE:CVE-2015-5315