Vulnetix
Try Vulnetix Request Demo
CVE-2016-4477 PUBLISHED

wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command.

EPSS 0.13% · 32.4th percentile

Risk Scores

EPSS Score
0.13%
32.4th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSwpa0, 1.0-3ubuntu2, 1.0-3ubuntu3
Ubuntu:16.04:LTSwpa0, 2.4-0ubuntu3, 2.4-0ubuntu4
Ubuntu:18.04:LTSwpa0

Timeline

References

Open in Interactive Console →