CVE-2015-5314 in Hostapd
Summary
The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
07/01/2015
Disclosure
02/21/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 113648 | Hostapd eap_server_pwd.c eap_pwd_process memory corruption | 119 | Not defined | Official fix | CVE-2015-5314 |