CVE-2015-4144 in hostapd
Summary
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.
Reservation
05/31/2015
Disclosure
06/15/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75890 | hostapd/wpa_supplicant EAP-pwd Server memory corruption | 119 | Not defined | Official fix | CVE-2015-4144 |