CVE-2015-5315

Name of the Vulnerable Software and Affected Versions wpa supplicant versions 2.0 through 2.5

Description The issue concerns the eap pwd process function in eap peer/eap pwd.c, which does not validate the size of the reassembly buffer for the final fragment when EAP-pwd is enabled. This allows remote attackers to cause a denial of service by sending a large final fragment in an EAP-pwd message.

Recommendations For wpa supplicant versions 2.0 through 2.5, update to version 2.6 or later to resolve the issue.