CVE-2015-4146

The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response…

published June 15, 2015

CVSS
—
EPSS
3%
Percentile
89.1
In the wild
Unconfirmed
What it is

The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03485 · 89.1th percentile
Published
2015-06-15T15:00Z
EPSS history
Timeline
  • 15 JUN 15:00Z
    The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response…
    cvelistv5