CVE-2015-4142 Integer overflow in n/a
Remote attackers can crash Wi-Fi access points or clients via crafted WMM Action frames due to an integer underflow in hostapd and wpa_supplicant.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-4142?
CVE-2015-4142 is a medium-severity vulnerability in Opensuse Opensuse, published on 15 Jun 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
Weakness: CWE-119
Which versions are affected by CVE-2015-4142?
It affects 7 products.
Linux distribution packages (8)
wpa_supplicant Red Hat:enterprise_linux:6::client | All versions | 1:0.7.3-6.el6 |
wpa_supplicant-debuginfo Red Hat:enterprise_linux:6::client | All versions | 1:0.7.3-6.el6 |
wpa_supplicant Red Hat:enterprise_linux:6::computenode | All versions | 1:0.7.3-6.el6 |
wpa_supplicant-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 1:0.7.3-6.el6 |
wpa_supplicant Red Hat:enterprise_linux:6::server | All versions | 1:0.7.3-6.el6 |
wpa_supplicant-debuginfo Red Hat:enterprise_linux:6::server | All versions | 1:0.7.3-6.el6 |
wpa_supplicant Red Hat:enterprise_linux:6::workstation | All versions | 1:0.7.3-6.el6 |
wpa_supplicant-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 1:0.7.3-6.el6 |
Products include Opensuse Opensuse, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Hpc Node, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation, W1.fi Hostapd and 1 more.
How do I fix CVE-2015-4142?
Apply the vendor's patch.
Is CVE-2015-4142 being exploited?
There is no known exploitation of CVE-2015-4142 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as DEBIAN-CVE-2015-4142, DLA-260-1, GHSA-r4j8-fwxp-qfmx, RHSA-2015:1439, UBUNTU-CVE-2015-4142.