CVE

Id
81419  
CVE No.
CVE-2015-4142  
Status
Candidate  
Description
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.  
Phase
Assigned (20150531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
732352 81419 CVE-2015-4142 MLIST:[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing  View
732353 81419 CVE-2015-4142 URL:http://www.openwall.com/lists/oss-security/2015/05/09/5  View
732354 81419 CVE-2015-4142 MLIST:[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd  View
732355 81419 CVE-2015-4142 URL:http://www.openwall.com/lists/oss-security/2015/05/31/6  View
732356 81419 CVE-2015-4142 CONFIRM:http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt  View
732357 81419 CVE-2015-4142 FEDORA:FEDORA-2015-1521e91178  View
732358 81419 CVE-2015-4142 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html  View
732359 81419 CVE-2015-4142 FEDORA:FEDORA-2015-6f16b5e39e  View
732360 81419 CVE-2015-4142 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html  View
732361 81419 CVE-2015-4142 FEDORA:FEDORA-2015-cfea96144a  View
732362 81419 CVE-2015-4142 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html  View
732363 81419 CVE-2015-4142 GENTOO:GLSA-201606-17  View
732364 81419 CVE-2015-4142 URL:https://security.gentoo.org/glsa/201606-17  View
732365 81419 CVE-2015-4142 REDHAT:RHSA-2015:1090  View
732366 81419 CVE-2015-4142 URL:http://rhn.redhat.com/errata/RHSA-2015-1090.html  View
732367 81419 CVE-2015-4142 REDHAT:RHSA-2015:1439  View
732368 81419 CVE-2015-4142 URL:http://rhn.redhat.com/errata/RHSA-2015-1439.html  View
732369 81419 CVE-2015-4142 SUSE:openSUSE-SU-2015:1030  View
732370 81419 CVE-2015-4142 URL:http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html  View
732371 81419 CVE-2015-4142 SECTRACK:1032625  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7897 JVNDB-2015-003217 Cisco WebEx Meeting Center の Web ベースの管理インターフェースにおけるアカウント名を列挙される脆弱性 Cisco WebEx Meeting Center の Web ベースの管理インターフェースは、ログイン試行の失敗に対して、ユーザ名が存在するか、管理者アカウントを持っているかに応じて異なるエラーメッセージを提示するため、アカウント名を列挙され、重要な情報を取得される脆弱性が存在します。 CVE-2015-4194 81419 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003217.html  View