Access Point Impersonation Attacks: hostapd-wpe

hostapd-wpe – Wireless Pwnage Edition – hostapd-wpe is the replacement for FreeRADIUS-WPE . It implements IEEE 802.1x Authenticator and Authentication Server impersonation attacks to obtain client credentials, establish connectivity to the client, and launch other attacks where applicable...

The vulnerabilities of the Wi-Fi Protected Access WPA Supplicant client, the Jouni Malinen Hostapd software access point, and the openSUSE operating system allow a hacker to trigger a service failure.

Multiple vulnerabilities exist in the Wi-Fi Protected Access WPA Supplicant software, the Jouni Malinen Hostapd access point software, and the openSUSE operating system. These vulnerabilities are related to integer handling errors. Exploitation of these vulnerabilities could allow a malicious act...

The vulnerability of the UPnP operating system openSUSE, the Wi-Fi protected access client WPA Supplicant, and the software access point Jouni Malinen Hostapd, which allows a intruder to trigger a service failure.

The vulnerability of the WMM Action UPnP component in the openSUSE operating system, the Wi-Fi Protected Access Point client WPA Supplicant, and the Jouni Malinen-hosted Hostapd software access point is caused by a buffer overflow. Exploiting this vulnerability allows an attacker, operating...

The vulnerability of the OpenSUSE operating system, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hosted Hostapd software allow a intruder to trigger a service failure.

The vulnerability of the EAP-pwd server of the operating system openSUSE, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hostapd software access point is caused by a buffer overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a...

The vulnerability of the OpenSUSE operating system, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hosted Hostapd software allow a intruder to trigger a service failure.

The vulnerability of the WPS UPnP function in the openSUSE operating system, the Wi-Fi protected access client WPA Supplicant, and the Jouni Malinen-hostapd software access point is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure by...

The vulnerability of the OpenSUSE operating system, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hosted Hostapd software allow a intruder to trigger a service failure.

The vulnerability of the EAP-pwd server of the operating system openSUSE, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hostapd software access point is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to cause a service failure...

hostapd Denial of Service Vulnerability

hostapd is a daemon that implements a wireless access point AP and authentication server. A denial of service vulnerability exists in hostapd. An attacker could exploit this vulnerability to cause a denial of service...

Multiple integer overflow vulnerabilities in hostapd/wpa_supplicant

hostapd is the user-space daemon for access points and authentication servers. wpasupplicant is the executable program for the WPA supplicant component the part that runs on the client side, which is responsible for coordinating communication between the WPA key and the WPA authentication side, a...

Ubuntu 14.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-2808-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2808-1 advisory. It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform...

Debian DSA-3397-1 : wpa - security update

Several vulnerabilities have been discovered in wpasupplicant and hostapd. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-4141 Kostya Kortchinsky of the Google Security Team discovered a vulnerability in the WPS UPnP function with HTTP chunked...

Ubuntu: Security Advisory (USN-2808-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2808-1: wpa_supplicant and hostapd vulnerabilities

It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform broadcast/multicast packet injections, or cause a denial of service. CVE-2015-5310 It was discovered that wpasupplicant and hostapd incorrectly...

USN-2808-1 wpa vulnerabilities

It was discovered that wpasupplicant incorrectly handled WMM Sleep Mode Response frame processing. A remote attacker could use this issue to perform broadcast/multicast packet injections, or cause a denial of service. CVE-2015-5310 It was discovered that wpasupplicant and hostapd incorrectly...

CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

Debian Security Advisory DSA 3397-1 (wpa - security update)

Several vulnerabilities have been discovered in wpasupplicant and hostapd. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-4141 Kostya Kortchinsky of the Google Security Team discovered a vulnerability in the WPS UPnP function with HTTP chunked transfe...

UBUNTU-CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

DSA-3397-1 wpa - security update

Bulletin has no description...

CVE-2015-8041

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to cause a denial of service process crash or infinite loop via a large payload length field value in an 1 WPS or 2 P2P NFC NDEF record, which triggers an out-of-bounds...

DEBIAN-CVE-2015-8041

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to cause a denial of service process crash or infinite loop via a large payload length field value in an 1 WPS or 2 P2P NFC NDEF record, which triggers an out-of-bounds...

UBUNTU-CVE-2015-8041

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to cause a denial of service process crash or infinite loop via a large payload length field value in an 1 WPS or 2 P2P NFC NDEF record, which triggers an out-of-bounds...