CVE-2015-4146: Medium severity wpa_supplicant vulnerability

Published Jun 15, 2015

Updated

The EAP-pwd peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.

Affected Software

17 affected componentsFixes available

debian/wpa

2:2.7+git20190128+0c1e29f-6+deb10u32:2.9.0-212:2.10-122:2.10-15

w1.fi Wpa Supplicant=1.0

w1.fi Wpa Supplicant=1.1

w1.fi Wpa Supplicant=2.0

w1.fi Wpa Supplicant=2.1

w1.fi Wpa Supplicant=2.2

w1.fi Wpa Supplicant=2.3

w1.fi Wpa Supplicant=2.4

w1.fi hostapd=1.0

w1.fi hostapd=1.1

w1.fi hostapd=2.0

w1.fi hostapd=2.1

w1.fi hostapd=2.2

w1.fi hostapd=2.3

w1.fi hostapd=2.4

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Event History

Jun 15, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4146?

CVE-2015-4146 is classified as a denial of service vulnerability that can lead to a crash of the affected service.

How do I fix CVE-2015-4146?

To address CVE-2015-4146, update your wpa_supplicant or hostapd software to a version that is not vulnerable, such as versions after 2.4 or any patched release.

Which software is affected by CVE-2015-4146?

CVE-2015-4146 affects wpa_supplicant versions 1.0 through 2.4 and hostapd versions 1.0 through 2.4.

Can CVE-2015-4146 be exploited remotely?

Yes, CVE-2015-4146 can be exploited remotely by sending crafted messages to trigger the vulnerability.

What are the symptoms of an exploit for CVE-2015-4146?

Exploitation of CVE-2015-4146 may result in the affected service crashing, leading to a denial of service.