Multiple integer overflows in the NDEF record parser in hostapd prior to 2.5 and wpa_supplicant prior to 2.5 allow remote malicious users to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
w1.fi wpa supplicant |
||
opensuse opensuse 13.2 |
||
opensuse opensuse 13.1 |
||
w1.fi hostapd |
Vulmon