Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2650-1
HistoryJun 16, 2015 - 12:00 a.m.

wpa_supplicant and hostapd vulnerabilities

2015-06-1600:00:00
ubuntu.com
33

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.075 Low

EPSS

Percentile

94.0%

JSON

Releases

  • Ubuntu 15.04
  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • wpa - client support for WPA and WPA2
  • wpasupplicant - client support for WPA and WPA2

Details

Kostya Kortchinsky discovered multiple flaws in wpa_supplicant and hostapd.
A remote attacker could use these issues to cause wpa_supplicant or hostapd
to crash, resulting in a denial of service. (CVE-2015-4141, CVE-2015-4142,
CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchhostapd< 2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchhostapd< 1:2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchhostapd-dbgsym< 1:2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchwpagui< 2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchwpagui-dbgsym< 2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchwpasupplicant< 2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchwpasupplicant-dbgsym< 2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchwpasupplicant-udeb< 2.1-0ubuntu7.2UNKNOWN
Ubuntu15.04noarchwpasupplicant-udeb-dbgsym< 2.1-0ubuntu7.2UNKNOWN
Ubuntu14.10noarchhostapd< 2.1-0ubuntu4.2UNKNOWN
Rows per page:
1-10 of 321

Related

securityvulns 2
archlinux 1
freebsd 1
nessus 24
openvas 14
gentoo 1
osv 2
debian 3
suse 3
prion 6
ubuntucve 6
debiancve 6
fedora 3
redhat 2
cve 6
oraclelinux 2
veracode 1
centos 2
ibm 1
apple 1
securityvulns
securityvulns
[USN-2650-1] wpa_supplicant and hostapd vulnerabilities
2015-06-21 00:00:00
wpa_supplicant multiple security vulnerabilities
2015-06-21 00:00:00
archlinux
archlinux
hostapd: denial of service
2015-10-05 00:00:00
freebsd
freebsd
hostapd and wpa_supplicant -- multiple vulnerabilities
2015-05-04 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-2650-1)
2015-06-17 00:00:00
FreeBSD : hostapd and wpa_supplicant -- multiple vulnerabilities (bbc0db92-084c-11e5-bb90-002590263bf5)
2015-06-03 00:00:00
GLSA-201606-17 : hostapd and wpa_supplicant: Multiple vulnerabilities
2016-06-28 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2650-1)
2015-06-17 00:00:00
Debian Security Advisory DSA 3397-1 (wpa - security update)
2015-11-10 00:00:00
Debian: Security Advisory (DSA-3397-1)
2015-11-09 00:00:00
gentoo
gentoo
hostapd and wpa_supplicant: Multiple vulnerabilities
2016-06-27 00:00:00
osv
osv
wpa - security update
2015-11-10 00:00:00
hostapd - security update
2015-06-30 00:00:00
debian
debian
[SECURITY] [DSA 3397-1] wpa security update
2015-11-10 20:08:26
[SECURITY] [DSA 3397-1] wpa security update
2015-11-10 20:08:26
[SECURITY] [DLA 260-1] hostapd security update
2015-06-30 06:31:53
suse
suse
Security update for hostapd (important)
2017-10-28 00:18:34
Security update for wpa_supplicant (moderate)
2020-11-27 00:00:00
Security update for wpa_supplicant (moderate)
2020-11-26 00:00:00
prion
prion
Out-of-bounds
2015-06-15 15:59:00
Design/Logic Flaw
2015-06-15 15:59:00
Memory corruption
2015-06-15 15:59:00
ubuntucve
ubuntucve
CVE-2015-4146
2015-06-01 00:00:00
CVE-2015-4142
2015-06-01 00:00:00
CVE-2015-4141
2015-06-01 00:00:00
debiancve
debiancve
CVE-2015-4145
2015-06-15 15:59:00
CVE-2015-4141
2015-06-15 15:59:00
CVE-2015-4143
2015-06-15 15:59:00
fedora
fedora
[SECURITY] Fedora 21 Update: wpa_supplicant-2.0-17.fc21
2015-11-23 23:21:55
[SECURITY] Fedora 23 Update: wpa_supplicant-2.4-6.fc23
2015-11-12 23:31:50
[SECURITY] Fedora 22 Update: wpa_supplicant-2.4-7.fc22
2015-11-24 22:27:28
redhat
redhat
(RHSA-2015:1439) Low: wpa_supplicant security and enhancement update
2015-07-22 00:00:00
(RHSA-2015:1090) Important: wpa_supplicant security and enhancement update
2015-06-11 00:00:00
cve
cve
CVE-2015-4141
2015-06-15 15:59:00
CVE-2015-4144
2015-06-15 15:59:00
CVE-2015-4143
2015-06-15 15:59:00
oraclelinux
oraclelinux
wpa_supplicant security and enhancement update
2015-07-28 00:00:00
wpa_supplicant security and enhancement update
2015-06-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:06:45
centos
centos
wpa_supplicant security update
2015-07-26 14:13:00
wpa_supplicant security update
2015-06-15 20:01:17
ibm
ibm
Security Bulletin:Vulnerabilities in wpa_supplicant may affect PowerKVM (CVE-2015-1863 and CVE-2015-4142)
2018-06-18 01:29:36
apple
apple
About the security content of iOS 15.5 and iPadOS 15.5
2022-05-16 00:00:00

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.075 Low

EPSS

Percentile

94.0%

JSON
Related for USN-2650-1
securityvulns2archlinux1freebsd1nessus24openvas14gentoo1osv2debian3suse3prion6ubuntucve6debiancve6fedora3redhat2cve6oraclelinux2veracode1centos2ibm1apple1