NetSight
IP …
medium6.8

CVE-2014-3686

wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote atta…

Impact

wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.

Affected products

VendorProductAffected versions
W1.FiHostapd
Versions 0.7.2, 1.0, 1.1, 2.0, 2.1, 2.2
W1.FiWpa Supplicant
Versions 0.72, 1.0, 1.1, 2.0, 2.1, 2.2
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04
DebianDebian Linux
Version 6.0

Weakness classification

CWE-20

References