CVE-2015-4146 in hostapd
Resumen (Inglés)
The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.
Reservar
2015-05-31
Divulgación
2015-06-15
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 75892 | hostapd/wpa_supplicant EAP-pwd Peer denegación de servicio | 404 | No está definido | Arreglo oficial | CVE-2015-4146 |