CVE-2015-8041

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to cause a denial of service process crash or infinite loop via a large payload length field value in an 1 WPS or 2 P2P NFC NDEF record, which triggers an out-of-bounds...

Integer overflow

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to cause a denial of service process crash or infinite loop via a large payload length field value in an 1 WPS or 2 P2P NFC NDEF record, which triggers an out-of-bounds...

CVE-2015-8041

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to cause a denial of service process crash or infinite loop via a large payload length field value in an 1 WPS or 2 P2P NFC NDEF record, which triggers an out-of-bounds...

CVE-2015-8041

CVE-2015-8041 affects hostapd and wpa_supplicant (pre-2.5) with multiple integer overflows in the NDEF record parser. An attacker can trigger a denial of service via a large WPS or P2P NFC NDEF payload length, causing an out-of-bounds read. The connected openSUSE/SUSE advisories reference this CV...

CVE-2015-8041

Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpasupplicant before 2.5 allow remote attackers to cause a denial of service process crash or infinite loop via a large payload length field value in an 1 WPS or 2 P2P NFC NDEF record, which triggers an out-of-bounds...

openSUSE Security Update : wpa_supplicant (openSUSE-2015-707)

wpasupplicant was updated to fix one security issue. This security issue was fixed : - bsc937419: Incomplete WPS and P2P NFC NDEF record payload length validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Fedora 21 : hostapd-2.4-3.fc21 (2015-11441)

apply fix for NDEF record payload length checking Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

wpa_supplicant -- WPS_NFC option payload length validation vulnerability

Jouni Malinen reports: Incomplete WPS and P2P NFC NDEF record payload length validation. 2015-5...

Nokia 6212 classic URI spoofing and DoS advisory (original date: Dec. 2008)

Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Nokia www.nokia.com Device: Nokia 6212 Classic Firmware: V 05.16, 29-09-08, RM-396 Device Type: mobile phone OS: Nokia Series40 Subsystem: Near Field Communication ----------------------------- Executive Summary: URL Spoofing when displayi...

CVE-2008-5827

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag...

CVE-2008-5826

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

CVE-2008-5825

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

Design/Logic Flaw

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

Design/Logic Flaw

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag...

Design/Logic Flaw

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

CVE-2008-5825

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

CVE-2008-5826

The Nokia 6131 Near Field Communication NFC phone with 05.12 firmware allows remote attackers to cause a denial of service device crash via 1 a large value in the payload length field in an NDEF record, or a certain length for a 2 tel: or 3 sms: NDEF URI...

CVE-2008-5826

The CVE-2008-5826 entry concerns the Nokia 6131 NFC phone (firmware 05.12). A remote attacker can trigger a Denial of Service (device crash) by sending crafted NDEF data: (1) an unusually large payload length in an NDEF record, or (2) a particular length for a tel: NDEF URI, or (3) an sms: NDEF U...

CVE-2008-5825

The CVE-2008-5825 entry concerns the Nokia 6131 NFC phone (firmware 05.12) SmartPoster handling. A bug in displaying the URI record occurs when the Title record contains a specific mix of spaces, carriage returns, and dots, allowing a crafted NDEF tag to trick a user into loading an arbitrary URI...