CVE

Id
81418  
CVE No.
CVE-2015-4141  
Status
Candidate  
Description
The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.  
Phase
Assigned (20150531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
732344 81418 CVE-2015-4141 MLIST:[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - WPS UPnP vulnerability with HTTP chunked transfer encoding  View
732345 81418 CVE-2015-4141 URL:http://www.openwall.com/lists/oss-security/2015/05/09/4  View
732346 81418 CVE-2015-4141 MLIST:[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd  View
732347 81418 CVE-2015-4141 URL:http://www.openwall.com/lists/oss-security/2015/05/31/6  View
732348 81418 CVE-2015-4141 CONFIRM:http://w1.fi/security/2015-2/wps-upnp-http-chunked-transfer-encoding.txt  View
732349 81418 CVE-2015-4141 GENTOO:GLSA-201606-17  View
732350 81418 CVE-2015-4141 URL:https://security.gentoo.org/glsa/201606-17  View
732351 81418 CVE-2015-4141 SUSE:openSUSE-SU-2015:1030  View

Related JVN