PT-2015-2727 · Hostap+4 · Hostapd+4
Kostya Kortchinsky
·
Published
2015-06-01
·
Updated
2024-06-15
·
CVE-2015-4141
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
hostapd versions 0.7.0 through 2.4
wpa supplicant versions 0.7.0 through 2.4
Description
The issue is related to the WPS UPnP function in hostapd and wpa supplicant, which can be exploited by remote attackers to cause a denial of service (crash) via a negative chunk length. This triggers an out-of-bounds read or heap-based buffer overflow. The vulnerability can be exploited by a remote attacker, allowing them to cause a denial of service.
Recommendations
For hostapd versions 0.7.0 through 2.4, consider disabling the WPS UPnP function as a temporary workaround until a patch is available.
For wpa supplicant versions 0.7.0 through 2.4, restrict the use of the WPS external registrar (ER) feature to minimize the risk of exploitation.
Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Suse
Ubuntu
Hostapd
Wpa Supplicant