Lucene search
+L

554 matches found

UbuntuCve
UbuntuCve
•added 2015/11/10 12:00 a.m.•34 views

CVE-2015-5315

The eappwdprocess function in eappeer/eappwd.c in wpasupplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service process...

5.9CVSS6.7AI score0.025EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2015/11/10 12:00 a.m.•54 views

Debian Security Advisory DSA 3397-1 (wpa - security update)

Several vulnerabilities have been discovered in wpasupplicant and hostapd. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-4141 Kostya Kortchinsky of the Google Security Team discovered a vulnerability in the WPS UPnP function with HTTP chunked transfe...

5CVSS0.2AI score0.04168EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2015/11/10 12:00 a.m.•41 views

hostapd and wpa_supplicant -- multiple vulnerabilities

Jouni Malinen reports: wpasupplicant unauthorized WNM Sleep Mode GTK control. 2015-6 - CVE-2015-5310 EAP-pwd missing last fragment length validation. 2015-7 - CVE-2015-5315 EAP-pwd peer error path failure on unexpected Confirm message. 2015-8 - CVE-2015-5316...

5.9CVSS5.9AI score0.03188EPSS
SaveExploits0References3
OSV
OSV
•added 2015/11/10 12:00 a.m.•41 views

DSA-3397-1 wpa - security update

Bulletin has no description...

5.9CVSS5.7AI score0.04168EPSS
SaveExploits0
ArchLinux
ArchLinux
•added 2015/10/05 12:00 a.m.•55 views

hostapd: denial of service

CVE-2015-4141 denial of service A vulnerability was found in the WPS UPnP function shared by hostapd WPS AP and wpasupplicant WPS external registrar. This may allow a possible denial of service attack through - CVE-2015-4142 denial of service A vulnerability was found in WMM Action frame...

5CVSS4.6AI score0.04168EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2015/08/17 12:00 a.m.•14 views

FreeBSD : freeradius3 -- insufficient validation on packets (0c2c4d84-42a2-11e5-9daa-14dae9d210b8)

Jouni Malinen reports : The EAP-PWD module performed insufficient validation on packets received from an EAP peer. This module is not enabled in the default configuration. Administrators must manually enable it for their server to be vulnerable. Only versions 3.0 up to 3.0.8 are affected...

5.5AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/18 12:00 a.m.•4 views

CVE-2015-4658: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 usr or 2 pwd parameter...

7.5CVSS6.4AI score0.01285EPSS
SaveExploits2References2
CNVD
CNVD
•added 2015/06/18 12:00 a.m.•19 views

hostapd and wpa_supplicant denial of service vulnerabilities (CNVD-2015-03931)

hostapd is a daemon that implements a wireless access point AP and authentication server. wpasupplicant is a daemon that runs in the background, developed by software developer Jouni Malinen and other contributors, and is primarily used to support the WEP, WPA/WPA2 and WAPI wireless protocols and...

5CVSS7AI score0.0347EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/06/18 12:00 a.m.•15 views

hostapd and wpa_supplicant denial of service vulnerability (CNVD-2015-03930)

hostapd is a daemon that implements a wireless access point AP and authentication server. wpasupplicant is a daemon that runs in the background, developed by software developer Jouni Malinen and other contributors, and is primarily used to support the WEP, WPA/WPA2 and WAPI wireless protocols and...

5CVSS7.1AI score0.03377EPSS
SaveExploits0References1
OSV
OSV
•added 2015/06/15 3:59 p.m.•11 views

CVE-2015-4146

The EAP-pwd peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not clear the L Length and M More flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service crash via a crafted message...

5.5AI score
SaveExploits0References8
NVD
NVD
•added 2015/06/15 3:59 p.m.•14 views

CVE-2015-4145

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service memory leak via a crafted message...

5CVSS5.5AI score0.03377EPSS
SaveExploits0References7
OSV
OSV
•added 2015/06/15 3:59 p.m.•14 views

CVE-2015-4145

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service memory leak via a crafted message...

5.6AI score
SaveExploits0References7
NVD
NVD
•added 2015/06/15 3:59 p.m.•20 views

CVE-2015-4144

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service crash via a crafted message...

5CVSS5.5AI score0.03377EPSS
SaveExploits0References7
OSV
OSV
•added 2015/06/15 3:59 p.m.•13 views

CVE-2015-4144

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service crash via a crafted message...

5.6AI score
SaveExploits0References7
NVD
NVD
•added 2015/06/15 3:59 p.m.•20 views

CVE-2015-4143

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted 1 Commit or 2 Confirm message payload...

5CVSS5.6AI score0.0347EPSS
SaveExploits0References7
Prion
Prion
•added 2015/06/15 3:59 p.m.•21 views

Out-of-bounds

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted 1 Commit or 2 Confirm message payload...

5CVSS6.9AI score0.0347EPSS
SaveExploits0References7Affected Software3
Prion
Prion
•added 2015/06/15 3:59 p.m.•22 views

Design/Logic Flaw

The EAP-pwd peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not clear the L Length and M More flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service crash via a crafted message...

5CVSS6.9AI score0.03455EPSS
SaveExploits0References8Affected Software3
Prion
Prion
•added 2015/06/15 3:59 p.m.•23 views

Memory corruption

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service memory leak via a crafted message...

5CVSS6.9AI score0.03377EPSS
SaveExploits0References7Affected Software3
Prion
Prion
•added 2015/06/15 3:59 p.m.•25 views

Code injection

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service crash via a crafted message...

5CVSS7AI score0.03377EPSS
SaveExploits0References7Affected Software3
CVE
CVE
•added 2015/06/15 3:00 p.m.•92 views

CVE-2015-4145

CVE-2015-4145 affects hostapd and wpa_supplicant (versions 1.0–2.4). The issue is in the EAP-pwd server/peer handling where a crafted message can cause a denial of service via a memory leak by not validating that a fragment is already being processed and by failing to validate payload length. Pub...

5CVSS5.6AI score0.03377EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder