CVE-2015-4144: Buffer Overflow

Published Jun 15, 2015

Updated

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.

Affected Software

17 affected componentsFixes available

debian/wpa

2:2.7+git20190128+0c1e29f-6+deb10u32:2.9.0-212:2.10-122:2.10-15

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

w1.fi hostapd=1.0

w1.fi hostapd=1.1

w1.fi hostapd=2.0

w1.fi hostapd=2.1

w1.fi hostapd=2.2

w1.fi hostapd=2.3

w1.fi hostapd=2.4

w1.fi Wpa Supplicant=1.0

w1.fi Wpa Supplicant=1.1

w1.fi Wpa Supplicant=2.0

w1.fi Wpa Supplicant=2.1

w1.fi Wpa Supplicant=2.2

w1.fi Wpa Supplicant=2.3

w1.fi Wpa Supplicant=2.4

Event History

Jun 15, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4144?

CVE-2015-4144 has been assigned a high severity due to its potential to cause a remote denial of service.

What versions are affected by CVE-2015-4144?

CVE-2015-4144 affects hostapd and wpa_supplicant versions from 1.0 to 2.4 inclusive.

How do I fix CVE-2015-4144?

To fix CVE-2015-4144, update hostapd or wpa_supplicant to versions that are not vulnerable, specifically to version 2.7+git20190128+0c1e29f-6+deb10u3 or later.

Can CVE-2015-4144 be exploited remotely?

Yes, CVE-2015-4144 can be exploited remotely through crafted messages that trigger a denial of service.

Is there a patch available for CVE-2015-4144?

Yes, the maintainers of hostapd and wpa_supplicant have released patches to address the issue in CVE-2015-4144.