PT-2015-2728
CVE-2015-4142
·
تاريخ النشر
2015-06-01
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
hostapd versions 0.5.5 through 2.4
wpa supplicant versions 0.7.0 through 2.4
Description
The issue is caused by an integer underflow in the WMM Action frame parser. This can be exploited by remote attackers to cause a denial of service (crash) via a crafted frame, triggering an out-of-bounds read.
Recommendations
For hostapd versions 0.5.5 through 2.4, consider disabling the WMM Action frame parser until a patch is available.
For wpa supplicant versions 0.7.0 through 2.4, restrict access to the AP mode MLME/SME functionality to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾