CVE-2015-4144

Name of the Vulnerable Software and Affected Versions hostapd and wpa supplicant versions 1.0 through 2.4

Description The issue is caused by a buffer overflow in the EAP-pwd server and peer implementation. It allows remote attackers to cause a denial of service (crash) via a specially crafted message.

Recommendations For hostapd and wpa supplicant versions 1.0 through 2.4, consider disabling the EAP-pwd server and peer implementation until a patch is available to prevent potential denial of service attacks.