CVE

Id
81420  
CVE No.
CVE-2015-4143  
Status
Candidate  
Description
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.  
Phase
Assigned (20150531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
732372 81420 CVE-2015-4143 MLIST:[oss-security] 20150509 Re: CVE request: vulnerability in wpa_supplicant and hostapd  View
732373 81420 CVE-2015-4143 URL:http://www.openwall.com/lists/oss-security/2015/05/09/6  View
732374 81420 CVE-2015-4143 MLIST:[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd  View
732375 81420 CVE-2015-4143 URL:http://www.openwall.com/lists/oss-security/2015/05/31/6  View
732376 81420 CVE-2015-4143 CONFIRM:http://w1.fi/security/2015-4/eap-pwd-missing-payload-length-validation.txt  View
732377 81420 CVE-2015-4143 GENTOO:GLSA-201606-17  View
732378 81420 CVE-2015-4143 URL:https://security.gentoo.org/glsa/201606-17  View
732379 81420 CVE-2015-4143 SUSE:openSUSE-SU-2015:1030  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7898 JVNDB-2015-003218 Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 Cisco IOS XR には、サービス運用妨害 (vty エラーおよび SSH と TELNET の停止) 状態にされる脆弱性が存在します。 CVE-2015-4195 81420 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003218.html  View