Vulnerability-Lookup

RHSA-2015:1439

Vulnerability from csaf_redhat - Published: 2015-07-20 14:05 - Updated: 2026-11-05 05:25

Summary

Red Hat Security Advisory: wpa_supplicant security and enhancement update

Severity

Low

Notes

Topic: An updated wpa_supplicant package that fixes one security issue and adds one enhancement is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Details: The wpa_supplicant package contains an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. It implements key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver. An integer underflow flaw, leading to a buffer over-read, was found in the way wpa_supplicant handled WMM Action frames. A specially crafted frame could possibly allow an attacker within Wi-Fi radio range to cause wpa_supplicant to crash. (CVE-2015-4142) This update includes the following enhancement: * Prior to this update, wpa_supplicant did not provide a way to require the host name to be listed in an X.509 certificate's Common Name or Subject Alternative Name, and only allowed host name suffix or subject substring checks. This update introduces a new configuration directive, 'domain_match', which adds a full host name check. (BZ#1186806) All wpa_supplicant users are advised to upgrade to this updated package, which contains a backported patch to correct this issue and adds this enhancement. After installing this update, the wpa_supplicant service will be restarted automatically.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2015-4142

An integer underflow flaw, leading to a buffer over-read, was found in the way wpa_supplicant handled WMM Action frames. A specially crafted frame could possibly allow an attacker within Wi-Fi radio range to cause wpa_supplicant to crash.

2.9 ()


                
                  AV:A/AC:M/Au:N/C:N/I:N/A:P

CWE-125 - Out-of-bounds Read

Affected products

Fixed 22 products

Product	Version	Remediation
Unresolved product id: 6Client:wpa_supplicant-1:0.7.3-6.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client:wpa_supplicant-1:0.7.3-6.el6.src	—	Vendor Fix fix
Unresolved product id: 6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-1:0.7.3-6.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-1:0.7.3-6.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-1:0.7.3-6.el6.src	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x	—	Vendor Fix fix
Unresolved product id: 6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation:wpa_supplicant-1:0.7.3-6.el6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64	—	Vendor Fix fix

Threats

Impact Low

References

9 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:1439	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1221178	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2015-4142	self
https://bugzilla.redhat.com/show_bug.cgi?id=1221178	external
https://www.cve.org/CVERecord?id=CVE-2015-4142	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4142	external
http://w1.fi/security/2015-3/integer-underflow-in…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated wpa_supplicant package that fixes one security issue and adds\none enhancement is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Low security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The wpa_supplicant package contains an 802.1X Supplicant with support for\nWEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication\nmethods. It implements key negotiation with a WPA Authenticator for client\nstations and controls the roaming and IEEE 802.11 authentication and\nassociation of the WLAN driver.\n\nAn integer underflow flaw, leading to a buffer over-read, was found in the\nway wpa_supplicant handled WMM Action frames. A specially crafted frame\ncould possibly allow an attacker within Wi-Fi radio range to cause\nwpa_supplicant to crash. (CVE-2015-4142)\n\nThis update includes the following enhancement:\n\n* Prior to this update, wpa_supplicant did not provide a way to require the\nhost name to be listed in an X.509 certificate\u0027s Common Name or Subject\nAlternative Name, and only allowed host name suffix or subject substring\nchecks. This update introduces a new configuration directive,\n\u0027domain_match\u0027, which adds a full host name check. (BZ#1186806)\n\nAll wpa_supplicant users are advised to upgrade to this updated package,\nwhich contains a backported patch to correct this issue and adds this\nenhancement. After installing this update, the wpa_supplicant service will\nbe restarted automatically.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:1439",
        "url": "https://access.redhat.com/errata/RHSA-2015:1439"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "1221178",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221178"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1439.json"
      }
    ],
    "title": "Red Hat Security Advisory: wpa_supplicant security and enhancement update",
    "tracking": {
      "current_release_date": "2026-11-05T05:25:41+00:00",
      "generator": {
        "date": "2026-11-05T05:25:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.4"
        }
      },
      "id": "RHSA-2015:1439",
      "initial_release_date": "2015-07-20T14:05:50+00:00",
      "revision_history": [
        {
          "date": "2015-07-20T14:05:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-07-20T14:05:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-05T05:25:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.i686",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.i686",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=ppc64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=ppc64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.s390x",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.s390x",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
                "product": {
                  "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
                  "product_id": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant-debuginfo@0.7.3-6.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-1:0.7.3-6.el6.src",
                "product": {
                  "name": "wpa_supplicant-1:0.7.3-6.el6.src",
                  "product_id": "wpa_supplicant-1:0.7.3-6.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wpa_supplicant@0.7.3-6.el6?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.src",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
        "relates_to_product_reference": "6Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        },
        "product_reference": "wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
        "relates_to_product_reference": "6Workstation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-4142",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2015-05-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1221178"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer underflow flaw, leading to a buffer over-read, was found in the way wpa_supplicant handled WMM Action frames. A specially crafted frame could possibly allow an attacker within Wi-Fi radio range to cause wpa_supplicant to crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "hostapd: integer underflow in AP mode WMM Action frame processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client:wpa_supplicant-1:0.7.3-6.el6.i686",
          "6Client:wpa_supplicant-1:0.7.3-6.el6.src",
          "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
          "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
          "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src",
          "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.i686",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.src",
          "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
          "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src",
          "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64",
          "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
          "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "RHBZ#1221178",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221178"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-4142",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-4142",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt",
          "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
        }
      ],
      "release_date": "2015-05-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-07-20T14:05:50+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Client:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Client:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Client:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.src",
            "6ComputeNode-optional:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6ComputeNode-optional:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Server:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.ppc64",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.s390x",
            "6Server:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.src",
            "6Workstation:wpa_supplicant-1:0.7.3-6.el6.x86_64",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.i686",
            "6Workstation:wpa_supplicant-debuginfo-1:0.7.3-6.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "hostapd: integer underflow in AP mode WMM Action frame processing"
    }
  ]
}

CVE-2015-4142 (GCVE-0-2015-4142)

Vulnerability from cvelistv5 – Published: 2015-06-15 15:00 – Updated: 2024-08-06 06:04

Summary

Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2266 records in the last 180 days details

References

15 references

URL	Tags
http://www.openwall.com/lists/oss-security/2015/05/31/6	mailing-listx_refsource_MLIST
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2015-1439.html	vendor-advisoryx_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.securitytracker.com/id/1032625	vdb-entryx_refsource_SECTRACK
http://w1.fi/security/2015-3/integer-underflow-in…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/05/09/5	mailing-listx_refsource_MLIST
http://www.debian.org/security/2015/dsa-3397	vendor-advisoryx_refsource_DEBIAN
https://security.gentoo.org/glsa/201606-17	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2650-1	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1090.html	vendor-advisoryx_refsource_REDHAT
https://support.apple.com/kb/HT213258	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2022/May/34	mailing-listx_refsource_FULLDISC

Date Public

2015-05-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:04:02.867Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/05/31/6"
          },
          {
            "name": "FEDORA-2015-cfea96144a",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html"
          },
          {
            "name": "RHSA-2015:1439",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1439.html"
          },
          {
            "name": "FEDORA-2015-6f16b5e39e",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html"
          },
          {
            "name": "1032625",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032625"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
          },
          {
            "name": "[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/05/09/5"
          },
          {
            "name": "DSA-3397",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3397"
          },
          {
            "name": "GLSA-201606-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201606-17"
          },
          {
            "name": "USN-2650-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2650-1"
          },
          {
            "name": "FEDORA-2015-1521e91178",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html"
          },
          {
            "name": "openSUSE-SU-2015:1030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html"
          },
          {
            "name": "RHSA-2015:1090",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1090.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213258"
          },
          {
            "name": "20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2022/May/34"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-05-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-17T06:08:43.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/05/31/6"
        },
        {
          "name": "FEDORA-2015-cfea96144a",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html"
        },
        {
          "name": "RHSA-2015:1439",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1439.html"
        },
        {
          "name": "FEDORA-2015-6f16b5e39e",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html"
        },
        {
          "name": "1032625",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032625"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
        },
        {
          "name": "[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/05/09/5"
        },
        {
          "name": "DSA-3397",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3397"
        },
        {
          "name": "GLSA-201606-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201606-17"
        },
        {
          "name": "USN-2650-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2650-1"
        },
        {
          "name": "FEDORA-2015-1521e91178",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html"
        },
        {
          "name": "openSUSE-SU-2015:1030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html"
        },
        {
          "name": "RHSA-2015:1090",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1090.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT213258"
        },
        {
          "name": "20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2022/May/34"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4142",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/05/31/6"
            },
            {
              "name": "FEDORA-2015-cfea96144a",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172608.html"
            },
            {
              "name": "RHSA-2015:1439",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1439.html"
            },
            {
              "name": "FEDORA-2015-6f16b5e39e",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171401.html"
            },
            {
              "name": "1032625",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032625"
            },
            {
              "name": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt",
              "refsource": "CONFIRM",
              "url": "http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt"
            },
            {
              "name": "[oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/05/09/5"
            },
            {
              "name": "DSA-3397",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3397"
            },
            {
              "name": "GLSA-201606-17",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201606-17"
            },
            {
              "name": "USN-2650-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2650-1"
            },
            {
              "name": "FEDORA-2015-1521e91178",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172655.html"
            },
            {
              "name": "openSUSE-SU-2015:1030",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-06/msg00019.html"
            },
            {
              "name": "RHSA-2015:1090",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1090.html"
            },
            {
              "name": "https://support.apple.com/kb/HT213258",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT213258"
            },
            {
              "name": "20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2022/May/34"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4142",
    "datePublished": "2015-06-15T15:00:00.000Z",
    "dateReserved": "2015-05-31T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:04:02.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted