Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

w1.fi hostapd 2.4 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2015-4143
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 allows remote malicious users to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.
W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 2.4W1.fi Hostapd 1.0W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 2.2W1.fi Hostapd 1.1W1.fi Hostapd 2.3W1.fi Hostapd 2.4Opensuse Opensuse 13.2Opensuse Opensuse 13.1
5
CVSSv2
CVE-2015-4144
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote malicious users to cause a denial of service (crash) via a crafted message.
Opensuse Opensuse 13.1Opensuse Opensuse 13.2W1.fi Hostapd 2.2W1.fi Hostapd 2.3W1.fi Hostapd 2.4W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 1.1W1.fi Hostapd 1.0W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 2.4W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 1.0
5
CVSSv2
CVE-2015-4145
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 does not validate a fragment is already being processed, which allows remote malicious users to cause a denial of service (memory leak) via a crafted message.
W1.fi Hostapd 2.2W1.fi Hostapd 2.3W1.fi Hostapd 2.4W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 1.1W1.fi Hostapd 1.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 2.4
5
CVSSv2
CVE-2015-4146
The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote malicious users to cause a denial of service (crash) via a crafted...
W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 2.4W1.fi Hostapd 2.1W1.fi Hostapd 2.2W1.fi Hostapd 1.1W1.fi Hostapd 1.0W1.fi Hostapd 2.0W1.fi Hostapd 2.3W1.fi Hostapd 2.4Opensuse Opensuse 13.2Opensuse Opensuse 13.1
4.3
CVSSv2
CVE-2015-4141
The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 up to and including 2.4 allows remote malicious users to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or h...
W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 0.7.3W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 0.7.1W1.fi Wpa Supplicant 0.7.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 2.4W1.fi Wpa Supplicant 0.7.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Hostapd 0.7.2W1.fi Hostapd 0.7.3W1.fi Hostapd 2.4W1.fi Hostapd 0.7.0W1.fi Hostapd 0.7.1W1.fi Hostapd 2.2W1.fi Hostapd 2.3W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 1.0W1.fi Hostapd 1.1
4.3
CVSSv2
CVE-2019-11555
The EAP-pwd implementation in hostapd (EAP server) prior to 2.8 and wpa_supplicant (EAP peer) prior to 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL p...
W1.fi HostapdW1.fi Wpa Supplicant
6.8
CVSSv2
CVE-2019-9497
The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an malicious user to complete EAP-PWD authentication without knowing the password. However, unless the cr...
W1.fi HostapdW1.fi Wpa SupplicantFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30
4.3
CVSSv2
CVE-2019-9494
The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password...
W1.fi HostapdW1.fi Wpa SupplicantFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Synology Radius Server 3.0Synology Router ManagerFreebsd Freebsd 11.2Freebsd Freebsd 12.0
4.3
CVSSv2
CVE-2019-9495
The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary f...
W1.fi HostapdW1.fi Wpa SupplicantFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Debian Debian Linux 8.0Synology Radius Server 3.0Synology Router ManagerFreebsd Freebsd 11.2Freebsd Freebsd 12.0
6.8
CVSSv2
CVE-2019-9498
The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete au...
W1.fi HostapdW1.fi Wpa SupplicantFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Debian Debian Linux 8.0Synology Router Manager 1.2Synology Radius Server 3.0Freebsd Freebsd 11.2Freebsd Freebsd 12.0Freebsd Freebsd
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook