Vulnetix
Try Vulnetix Request Demo
CVE-2015-4141 PUBLISHED

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.

EPSS 1.47% · 80.8th percentile

Risk Scores

EPSS Score
1.47%
80.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSwpa0, 1.0-3ubuntu2, 1.0-3ubuntu3

Timeline

References

Open in Interactive Console →