Versio.io

CVE-2015-4142

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 15-06-2015 05:59
Last modified: - 17-05-2022 09:15
Total changes: - 3

Description

Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:N/A:P
Low
Attack complexity
Network
Attack vector
Low
Availability
None
Confidentiality
None
Integrity
-
Privileges required
-
Scope
-
User interaction
4.3
Base score
8.6
2.9
Exploitability score
Impact score
 

Verification logic

OR
OR
vendor=w1.fi AND product=wpa_supplicant AND version=2.3
vendor=w1.fi AND product=wpa_supplicant AND version=0.7.1
vendor=w1.fi AND product=wpa_supplicant AND version=2.1
vendor=w1.fi AND product=wpa_supplicant AND version=2.2
vendor=w1.fi AND product=wpa_supplicant AND version=1.0
vendor=w1.fi AND product=wpa_supplicant AND version=2.4
vendor=w1.fi AND product=wpa_supplicant AND version=0.7.0
vendor=w1.fi AND product=wpa_supplicant AND version=0.7.3
vendor=w1.fi AND product=wpa_supplicant AND version=1.1
vendor=w1.fi AND product=wpa_supplicant AND version=0.7.2
vendor=w1.fi AND product=wpa_supplicant AND version=2.0
OR
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_hpc_node AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_desktop AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=6.0
vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=6.0
OR
vendor=w1.fi AND product=hostapd AND version=1.1
vendor=w1.fi AND product=hostapd AND version=2.4
vendor=w1.fi AND product=hostapd AND version=2.0
vendor=w1.fi AND product=hostapd AND version=0.7.3
vendor=w1.fi AND product=hostapd AND version=1.0
vendor=w1.fi AND product=hostapd AND version=0.7.0
vendor=w1.fi AND product=hostapd AND version=2.3
vendor=w1.fi AND product=hostapd AND version=0.7.2
vendor=w1.fi AND product=hostapd AND version=2.2
vendor=w1.fi AND product=hostapd AND version=2.1
vendor=w1.fi AND product=hostapd AND version=0.7.1
OR
vendor=opensuse AND product=opensuse AND version=13.1
vendor=opensuse AND product=opensuse AND version=13.2
 

Reference

 


Keywords

NVD

 

CVE-2015-4142

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.