CVE-2015-8041 Integer overflow in n/a
Remote attackers can cause a denial of service in hostapd or wpa_supplicant via integer overflows in the NDEF record parser.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-8041?
CVE-2015-8041 is a medium-severity vulnerability in Opensuse Opensuse, published on 9 Nov 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
Weakness: CWE-189
Which versions are affected by CVE-2015-8041?
It affects 3 products.
Products include Opensuse Opensuse, W1.fi Hostapd, W1.fi Wpa Supplicant.
How do I fix CVE-2015-8041?
Upgrade to a fixed version.
Is CVE-2015-8041 being exploited?
There is no known exploitation of CVE-2015-8041 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as DEBIAN-CVE-2015-8041, GHSA-c6pq-gj5g-cpf8, UBUNTU-CVE-2015-8041.