CVE-2015-4144

The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the…

published June 15, 2015

CVSS
—
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03406 · 88.8th percentile
Published
2015-06-15T15:00Z
EPSS history
Timeline
  • 15 JUN 15:00Z
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the…
    cvelistv5