Out-of-bounds read In wpa
Description
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 2.3-2.2 | ||
debian 13 | 2.3-2.2 | ||
debian 11 | 2.3-2.2 | ||
debian 12 | 2.3-2.2 | ||
 rpm rhel7 | 1:2.0-17.el7_1 | ||
rpm rhel6 | 1:0.7.3-6.el6 |
Aliases
1. 2. 3. 4. 5.