wpa_supplicant and hostapd denial of service vulnerabilities

wpasupplicant is a daemon running in the background developed by software developer Jouni Malinen and other contributors to support WEP, WPA/WPA2, and WAPI wireless protocols and encrypted authentication. hostapd is a daemon that implements a wireless access point AP and authentication server. A...

hostapd and wpa_supplicant -- psk configuration parameter update allowing arbitrary data to be written

Jouni Malinen reports: psk configuration parameter update allowing arbitrary data to be written 2016-1 - CVE-2016-4476/CVE-2016-4477...

FreeBSD : hostapd and wpa_supplicant -- multiple vulnerabilities (976567f6-05c5-11e6-94fa-002590263bf5)

Jouni Malinen reports : wpasupplicant unauthorized WNM Sleep Mode GTK control. 2015-6 - CVE-2015-5310 EAP-pwd missing last fragment length validation. 2015-7 - CVE-2015-5315 EAP-pwd peer error path failure on unexpected Confirm message. 2015-8 - CVE-2015-5316 %NASLMINLEVEL 70300 C Tenable Network...

Access Point Impersonation Attacks: hostapd-wpe

hostapd-wpe – Wireless Pwnage Edition – hostapd-wpe is the replacement for FreeRADIUS-WPE . It implements IEEE 802.1x Authenticator and Authentication Server impersonation attacks to obtain client credentials, establish connectivity to the client, and launch other attacks where applicable...

The vulnerabilities of the Wi-Fi Protected Access WPA Supplicant client, the Jouni Malinen Hostapd software access point, and the openSUSE operating system allow a hacker to trigger a service failure.

Multiple vulnerabilities exist in the Wi-Fi Protected Access WPA Supplicant software, the Jouni Malinen Hostapd access point software, and the openSUSE operating system. These vulnerabilities are related to integer handling errors. Exploitation of these vulnerabilities could allow a malicious act...

The vulnerability of the OpenSUSE operating system, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hosted Hostapd software allow a intruder to trigger a service failure.

The vulnerability of the WPS UPnP function in the openSUSE operating system, the Wi-Fi protected access client WPA Supplicant, and the Jouni Malinen-hostapd software access point is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure by...

The vulnerability of the OpenSUSE operating system, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hosted Hostapd software allow a intruder to trigger a service failure.

The vulnerability of the EAP-pwd server of the operating system openSUSE, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hostapd software access point is caused by a buffer overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a...

The vulnerability of the UPnP operating system openSUSE, the Wi-Fi protected access client WPA Supplicant, and the software access point Jouni Malinen Hostapd, which allows a intruder to trigger a service failure.

The vulnerability of the WMM Action UPnP component in the openSUSE operating system, the Wi-Fi Protected Access Point client WPA Supplicant, and the Jouni Malinen-hosted Hostapd software access point is caused by a buffer overflow. Exploiting this vulnerability allows an attacker, operating...

The vulnerability of the OpenSUSE operating system, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hosted Hostapd software allow a intruder to trigger a service failure.

The vulnerability of the EAP-pwd server of the operating system openSUSE, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hostapd software access point is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

hostapd Denial of Service Vulnerability

hostapd is a daemon that implements a wireless access point AP and authentication server. A denial of service vulnerability exists in hostapd. An attacker could exploit this vulnerability to cause a denial of service...

Multiple integer overflow vulnerabilities in hostapd/wpa_supplicant

hostapd is the user-space daemon for access points and authentication servers. wpasupplicant is the executable program for the WPA supplicant component the part that runs on the client side, which is responsible for coordinating communication between the WPA key and the WPA authentication side, a...

Debian DSA-3397-1 : wpa - security update

Several vulnerabilities have been discovered in wpasupplicant and hostapd. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-4141 Kostya Kortchinsky of the Google Security Team discovered a vulnerability in the WPS UPnP function with HTTP chunked...

Ubuntu: Security Advisory (USN-2808-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-2808-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2808-1 advisory. It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform...

USN-2808-1 wpa vulnerabilities

It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform broadcast/multicast packet injections, or cause a denial of service. CVE-2015-5310 It was discovered that wpasupplicant and hostapd incorrectly...

USN-2808-1: wpa_supplicant and hostapd vulnerabilities

It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform broadcast/multicast packet injections, or cause a denial of service. CVE-2015-5310 It was discovered that wpasupplicant and hostapd incorrectly...

UBUNTU-CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

DSA-3397-1 wpa - security update

Bulletin has no description...

PT-2015-6848

Name of the Vulnerable Software and Affected Versions hostapd versions 2.0 through 2.5 Description The issue is related to the eap pwd process function in eap server/eap server pwd.c, which does not validate the size of the reassembly buffer for the final fragment in EAP-pwd messages. This can be...