NetSight
IP …
medium4.3

CVE-2015-4142

Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionalit…

Impact

Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.

Affected products

VendorProductAffected versions
W1.FiWpa Supplicant
Versions 0.7.0, 0.7.1, 0.7.2, 0.7.3, 1.0, 1.1
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Hpc Node
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0
W1.FiHostapd
Versions 0.7.0, 0.7.1, 0.7.2, 0.7.3, 1.0, 1.1
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-119

References