CVE-2015-4141

Name of the Vulnerable Software and Affected Versions hostapd versions 0.7.0 through 2.4 wpa supplicant versions 0.7.0 through 2.4

Description The issue is related to the WPS UPnP function in hostapd and wpa supplicant, which can be exploited by remote attackers to cause a denial of service (crash) via a negative chunk length. This triggers an out-of-bounds read or heap-based buffer overflow. The vulnerability can be exploited by a remote attacker, allowing them to cause a denial of service.

Recommendations For hostapd versions 0.7.0 through 2.4, consider disabling the WPS UPnP function as a temporary workaround until a patch is available. For wpa supplicant versions 0.7.0 through 2.4, restrict the use of the WPS external registrar (ER) feature to minimize the risk of exploitation.