PT-2015-2728 · Hostap+5 · Hostapd+6

Kostya Kortchinsky

·

Publicado

2015-06-01

·

Atualizado

2024-06-15

·

CVE-2015-4142

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions hostapd versions 0.5.5 through 2.4 wpa supplicant versions 0.7.0 through 2.4
Description The issue is caused by an integer underflow in the WMM Action frame parser. This can be exploited by remote attackers to cause a denial of service (crash) via a crafted frame, triggering an out-of-bounds read.
Recommendations For hostapd versions 0.5.5 through 2.4, consider disabling the WMM Action frame parser until a patch is available. For wpa supplicant versions 0.7.0 through 2.4, restrict access to the AP mode MLME/SME functionality to minimize the risk of exploitation.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1915
ALT-PU-2016-1916
BDU:2015-12093
CESA-2015_1090
CESA-2015_1439
CVE-2015-4142
DLA-260-1
DSA-3397-1
OPENSUSE-SU-2017_2896-1
OPENSUSE-SU-2020:2053-1
OPENSUSE-SU-2020:2059-1
OPENSUSE-SU-2020_2053-1
OPENSUSE-SU-2020_2059-1
OPENSUSE-SU-2024:10022-1
OPENSUSE-SU-2024:10499-1
RHSA-2015:1090
RHSA-2015:1439
RHSA-2015_1090
RHSA-2015_1439
SUSE-SU-2015:2221-1
SUSE-SU-2016:2305-1
SUSE-SU-2020:3380-1
USN-2650-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Ubuntu
Hostapd
Wpa Supplicant