Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

w1.fi wpa supplicant 2.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-4143
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 allows remote malicious users to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.
W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 2.4W1.fi Hostapd 1.0W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 2.2W1.fi Hostapd 1.1W1.fi Hostapd 2.3W1.fi Hostapd 2.4Opensuse Opensuse 13.2Opensuse Opensuse 13.1
NA
CVE-2015-4144
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote malicious users to cause a denial of service (crash) via a crafted message.
Opensuse Opensuse 13.1Opensuse Opensuse 13.2W1.fi Hostapd 2.2W1.fi Hostapd 2.3W1.fi Hostapd 2.4W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 1.1W1.fi Hostapd 1.0W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 2.4W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 1.0
NA
CVE-2015-4145
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 does not validate a fragment is already being processed, which allows remote malicious users to cause a denial of service (memory leak) via a crafted message.
W1.fi Hostapd 2.2W1.fi Hostapd 2.3W1.fi Hostapd 2.4W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 1.1W1.fi Hostapd 1.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 2.4
NA
CVE-2015-4146
The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 up to and including 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote malicious users to cause a denial of service (crash) via a crafted...
W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 2.4W1.fi Hostapd 2.1W1.fi Hostapd 2.2W1.fi Hostapd 1.1W1.fi Hostapd 1.0W1.fi Hostapd 2.0W1.fi Hostapd 2.3W1.fi Hostapd 2.4Opensuse Opensuse 13.2Opensuse Opensuse 13.1
NA
CVE-2015-4141
The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 up to and including 2.4 allows remote malicious users to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or h...
W1.fi Wpa Supplicant 1.1W1.fi Wpa Supplicant 2.0W1.fi Wpa Supplicant 0.7.3W1.fi Wpa Supplicant 1.0W1.fi Wpa Supplicant 0.7.1W1.fi Wpa Supplicant 0.7.2W1.fi Wpa Supplicant 2.3W1.fi Wpa Supplicant 2.4W1.fi Wpa Supplicant 0.7.0W1.fi Wpa Supplicant 2.1W1.fi Wpa Supplicant 2.2W1.fi Hostapd 0.7.2W1.fi Hostapd 0.7.3W1.fi Hostapd 2.4W1.fi Hostapd 0.7.0W1.fi Hostapd 0.7.1W1.fi Hostapd 2.2W1.fi Hostapd 2.3W1.fi Hostapd 2.0W1.fi Hostapd 2.1W1.fi Hostapd 1.0W1.fi Hostapd 1.1
5.3
CVSSv3
CVE-2017-13079
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux Server 7Freebsd Freebsd 10Freebsd Freebsd 10.4Opensuse Leap 42.2Canonical Ubuntu Linux 17.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 11Freebsd Freebsd 11.1Redhat Enterprise Linux Desktop 7Freebsd FreebsdOpensuse Leap 42.3W1.fi Hostapd 2.4W1.fi Hostapd 2.3W1.fi Hostapd 0.6.10W1.fi Hostapd 0.6.9W1.fi Hostapd 0.4.11W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.2.8
5.3
CVSSv3
CVE-2017-13081
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Debian Debian Linux 8.0Freebsd Freebsd 11Redhat Enterprise Linux Server 7Redhat Enterprise Linux Desktop 7Freebsd Freebsd 10.4Canonical Ubuntu Linux 17.04Opensuse Leap 42.2Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Freebsd Freebsd 11.1Freebsd Freebsd 10Freebsd FreebsdOpensuse Leap 42.3W1.fi Hostapd 2.4W1.fi Hostapd 2.3W1.fi Hostapd 0.6.9W1.fi Hostapd 0.6.8W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.2.8W1.fi Hostapd 0.2.6
6.8
CVSSv3
CVE-2017-13084
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Freebsd Freebsd 11Freebsd Freebsd 11.1Redhat Enterprise Linux Desktop 7Freebsd FreebsdCanonical Ubuntu Linux 17.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 10Freebsd Freebsd 10.4Opensuse Leap 42.3Opensuse Leap 42.2Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux Server 7W1.fi Hostapd 2.3W1.fi Hostapd 2.2W1.fi Hostapd 0.6.9W1.fi Hostapd 0.6.8W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.4.8W1.fi Hostapd 0.2.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook