CVE-2015-4145

The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows…

published June 15, 2015

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service (memory leak) via a crafted message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03377 · 88.6th percentile
Published
2015-06-15T15:00Z
EPSS history
Timeline
  • 15 JUN 15:00Z
    The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows…
    cvelistv5