Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-4141

Fixed in a distro release EPSS 3%

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.

Published 2015-06-15 · CVE record · OSV

Products: w1.fi wpa_supplicant, w1.fi hostapd, opensuse

Distro releases

ReleasePackageFixed in
Debian 12wpa2.3-2.2
Debian 13wpa2.3-2.2
Debian 14wpa2.3-2.2
Debian 7wpa1.0-3+deb7u3
Debian 8wpa2.3-1+deb8u3
SUSE Linux Enterprise Desktop 11 SP3wpa_supplicant0.7.1-6.17.4
SUSE Linux Enterprise Desktop 11 SP4wpa_supplicant0.7.1-6.17.4
SUSE Linux Enterprise Desktop 12 SP1wpa_supplicant2.2-14.2
SUSE Linux Enterprise High Performance Computing 15-ESPOSwpa_supplicant2.9-4.20.1
SUSE Linux Enterprise High Performance Computing 15-LTSSwpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Module for Basesystem 15 SP1wpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Module for Basesystem 15 SP2wpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Server 11 SP3wpa_supplicant0.7.1-6.17.4
SUSE Linux Enterprise Server 11 SP3-TERADATAwpa_supplicant0.7.1-6.17.4
SUSE Linux Enterprise Server 11 SP4wpa_supplicant0.7.1-6.17.4
SUSE Linux Enterprise Server 12 SP1wpa_supplicant2.2-14.2
SUSE Linux Enterprise Server 15-LTSSwpa_supplicant2.9-4.20.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3wpa_supplicant0.7.1-6.17.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4wpa_supplicant0.7.1-6.17.4
SUSE Linux Enterprise Server for SAP Applications 12 SP1wpa_supplicant2.2-14.2
SUSE Linux Enterprise Server for SAP Applications 15wpa_supplicant2.9-4.20.1
Ubuntu 14.04 LTSwpa2.1-0ubuntu1.3
openSUSE Leap 15.1wpa_supplicant2.9-lp151.5.10.1
openSUSE Leap 15.2wpa_supplicant2.9-lp152.8.3.1
openSUSE Tumbleweedhostapd2.6-1.1
openSUSE Tumbleweedwpa_supplicant2.6-1.1