CVE-2015-4146

Name of the Vulnerable Software and Affected Versions hostapd and wpa supplicant versions 1.0 through 2.4

Description The issue concerns the EAP-pwd peer implementation in hostapd and wpa supplicant, where the L (Length) and M (More) flags are not cleared before determining if a response should be fragmented. This allows remote attackers to cause a denial of service (crash) via a crafted message.

Recommendations For hostapd and wpa supplicant versions 1.0 through 2.4, consider applying a patch that clears the L (Length) and M (More) flags before determining response fragmentation to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.