CVE-2015-4142

Name of the Vulnerable Software and Affected Versions hostapd versions 0.5.5 through 2.4 wpa supplicant versions 0.7.0 through 2.4

Description The issue is caused by an integer underflow in the WMM Action frame parser. This can be exploited by remote attackers to cause a denial of service (crash) via a crafted frame, triggering an out-of-bounds read.

Recommendations For hostapd versions 0.5.5 through 2.4, consider disabling the WMM Action frame parser until a patch is available. For wpa supplicant versions 0.7.0 through 2.4, restrict access to the AP mode MLME/SME functionality to minimize the risk of exploitation.