Back
CVE-2015-4142
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode…
Medium4.3EPSS 4.0%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |
- EPSS (exploitation in 30 days)
- 4.0% · top 9.5% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.
Weakness
Affected products
n/a
- affected n/a
References (15)
- [oss-security] 20150531 Re: CVE request: vulnerability in wpa_supplicant and hostapd (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- FEDORA-2015-cfea96144a (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- RHSA-2015:1439 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- FEDORA-2015-6f16b5e39e (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- 1032625 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt (opens in a new tab)x_refsource_CONFIRMx_transferred
- [oss-security] 20150509 CVE request: hostapd/wpa_supplicant - Integer underflow in AP mode WMM Action frame processing (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- DSA-3397 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- GLSA-201606-17 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
- USN-2650-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- FEDORA-2015-1521e91178 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
- openSUSE-SU-2015:1030 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- RHSA-2015:1090 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- https://support.apple.com/kb/HT213258 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20220516 APPLE-SA-2022-05-16-1 iOS 15.5 and iPadOS 15.5 (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .