csaf_redhat - rhsa-2015

rhsa-2015_1439

Vulnerability from csaf_redhat

Published

2015-07-20 14:05

Modified

2024-11-22 09:07

Summary

Red Hat Security Advisory: wpa_supplicant security and enhancement update

Notes

Topic

An updated wpa_supplicant package that fixes one security issue and adds one enhancement is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Details

The wpa_supplicant package contains an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. It implements key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver. An integer underflow flaw, leading to a buffer over-read, was found in the way wpa_supplicant handled WMM Action frames. A specially crafted frame could possibly allow an attacker within Wi-Fi radio range to cause wpa_supplicant to crash. (CVE-2015-4142) This update includes the following enhancement: * Prior to this update, wpa_supplicant did not provide a way to require the host name to be listed in an X.509 certificate's Common Name or Subject Alternative Name, and only allowed host name suffix or subject substring checks. This update introduces a new configuration directive, 'domain_match', which adds a full host name check. (BZ#1186806) All wpa_supplicant users are advised to upgrade to this updated package, which contains a backported patch to correct this issue and adds this enhancement. After installing this update, the wpa_supplicant service will be restarted automatically.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated wpa_supplicant package that fixes one security issue and adds\none enhancement is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Low security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The wpa_supplicant package contains an 802.1X Supplicant with support for\nWEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication\nmethods. It implements key negotiation with a WPA Authenticator for client\nstations and controls the roaming and IEEE 802.11 authentication and\nassociation of the WLAN driver.\n\nAn integer underflow flaw, leading to a buffer over-read, was found in the\nway wpa_supplicant handled WMM Action frames. A specially crafted frame\ncould possibly allow an attacker within Wi-Fi radio range to cause\nwpa_supplicant to crash. (CVE-2015-4142)\n\nThis update includes the following enhancement:\n\n* Prior to this update, wpa_supplicant did not provide a way to require the\nhost name to be listed in an X.509 certificate\u0027s Common Name or Subject\nAlternative Name, and only allowed host name suffix or subject substring\nchecks. This update introduces a new configuration directive,\n\u0027domain_match\u0027, which adds a full host name check. (BZ#1186806)\n\nAll wpa_supplicant users are advised to upgrade to this updated package,\nwhich contains a backported patch to correct this issue and adds this\nenhancement. After installing this update, the wpa_supplicant service will\nbe restarted automatically.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:1439",
        "url": "https://access.redhat.com/errata/RHSA-2015:1439"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "1221178",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221178"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1439.json"
      }
    ],
    "title": "Red Hat Security Advisory: wpa_supplicant security and enhancement update",
    "tracking": {
      "current_release_date": "2024-11-22T09:07:15+00:00",
      "generator": {
        "date": "2024-11-22T09:07:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2015:1439",
      "initial_release_date": "2015-07-20T14:05:50+00:00",
      "revision_history": [
        {
          "date": "2015-07-20T14:05:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-07-20T14:05:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T09:07:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.i686",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.i686",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=ppc64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=ppc64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.s390x",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.s390x",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.src",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.src",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-4142",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2015-05-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1221178"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer underflow flaw, leading to a buffer over-read, was found in the way wpa_supplicant handled WMM Action frames. A specially crafted frame could possibly allow an attacker within Wi-Fi radio range to cause wpa_supplicant to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "hostapd: integer underflow in AP mode WMM Action frame processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client:wpa_supplicant-1:0.7.3-6.el6.i686",
          "6Client:wpa_supplicant-1:0.7.3-6.el6.ppc64",
          "6Client:wpa_supplicant-1:0.7.3-6.el6.s390x",
          "6Client:wpa_supplicant-1:0.7.3-6.el6.src",
          "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
          "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
          "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
          "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
          "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.i686",
          "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.ppc64",
          "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.s390x",
          "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src",
          "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
          "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
          "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
          "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.i686",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.src",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.ppc64",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.s390x",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
          "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
          "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
          "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "RHBZ#1221178",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221178"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-4142",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-4142",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt",
          "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
        }
      ],
      "release_date": "2015-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-07-20T14:05:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "hostapd: integer underflow in AP mode WMM Action frame processing"
    }
  ]
}

cve-2015-4142

Vulnerability from cvelistv5

Published

2015-06-15 15:00

Modified

2024-08-06 06:04

Severity ?

Summary

Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2015/05/31/6	mailing-list, x_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html	vendor-advisory, x_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2015-1439.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1032625	vdb-entry, x_refsource_SECTRACK
	http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2015/05/09/5	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2015/dsa-3397	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201606-17	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2650-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-1090.html	vendor-advisory, x_refsource_REDHAT
	https://support.apple.com/kb/HT213258	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2022/May/34	mailing-list, x_refsource_FULLDISC

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:04:02.867Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/05/31/6"
          },
          {
            "name": "FEDORA-2015-cfea96144a",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html"
          },
          {
            "name": "RHSA-2015:1439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1439.html"
          },
          {
            "name": "FEDORA-2015-6f16b5e39e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html"
          },
          {
            "name": "1032625",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032625"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
          },
          {
            "name": "[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/05/09/5"
          },
          {
            "name": "DSA-3397",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3397"
          },
          {
            "name": "GLSA-201606-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-17"
          },
          {
            "name": "USN-2650-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2650-1"
          },
          {
            "name": "FEDORA-2015-1521e91178",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html"
          },
          {
            "name": "openSUSE-SU-2015:1030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html"
          },
          {
            "name": "RHSA-2015:1090",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1090.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213258"
          },
          {
            "name": "20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/May/34"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-17T06:08:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/05/31/6"
        },
        {
          "name": "FEDORA-2015-cfea96144a",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html"
        },
        {
          "name": "RHSA-2015:1439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1439.html"
        },
        {
          "name": "FEDORA-2015-6f16b5e39e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html"
        },
        {
          "name": "1032625",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032625"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
        },
        {
          "name": "[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/05/09/5"
        },
        {
          "name": "DSA-3397",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3397"
        },
        {
          "name": "GLSA-201606-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-17"
        },
        {
          "name": "USN-2650-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2650-1"
        },
        {
          "name": "FEDORA-2015-1521e91178",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html"
        },
        {
          "name": "openSUSE-SU-2015:1030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html"
        },
        {
          "name": "RHSA-2015:1090",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1090.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT213258"
        },
        {
          "name": "20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/May/34"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4142",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/05/31/6"
            },
            {
              "name": "FEDORA-2015-cfea96144a",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html"
            },
            {
              "name": "RHSA-2015:1439",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1439.html"
            },
            {
              "name": "FEDORA-2015-6f16b5e39e",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html"
            },
            {
              "name": "1032625",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032625"
            },
            {
              "name": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt",
              "refsource": "CONFIRM",
              "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
            },
            {
              "name": "[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/05/09/5"
            },
            {
              "name": "DSA-3397",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3397"
            },
            {
              "name": "GLSA-201606-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-17"
            },
            {
              "name": "USN-2650-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2650-1"
            },
            {
              "name": "FEDORA-2015-1521e91178",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html"
            },
            {
              "name": "openSUSE-SU-2015:1030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html"
            },
            {
              "name": "RHSA-2015:1090",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1090.html"
            },
            {
              "name": "https://support.apple.com/kb/HT213258",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT213258"
            },
            {
              "name": "20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2022/May/34"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4142",
    "datePublished": "2015-06-15T15:00:00",
    "dateReserved": "2015-05-31T00:00:00",
    "dateUpdated": "2024-08-06T06:04:02.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted