CVE-2015-8041
Fixed in a distro release EPSS 3%
Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
Products: w1.fi wpa_supplicant, opensuse, w1.fi hostapd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wpa | 2.3-2.2 |
| Debian 13 | wpa | 2.3-2.2 |
| Debian 14 | wpa | 2.3-2.2 |
| Debian 7 | wpa | 1.0-3+deb7u3 |
| Debian 8 | wpa | 2.3-1+deb8u3 |
| SUSE HPE Helion OpenStack 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | wpa_supplicant | 2.2-14.2 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Server 12 SP1 | wpa_supplicant | 2.2-14.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server 12 SP5 | wpa_supplicant | 2.9-23.3.1 |
| SUSE Linux Enterprise Server 15-LTSS | wpa_supplicant | 2.9-4.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | wpa_supplicant | 2.2-14.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | wpa_supplicant | 2.9-15.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | wpa_supplicant | 2.9-23.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | wpa_supplicant | 2.9-4.20.1 |
| SUSE OpenStack Cloud 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud 9 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud Crowbar 8 | wpa_supplicant | 2.9-15.22.1 |
| SUSE OpenStack Cloud Crowbar 9 | wpa_supplicant | 2.9-15.22.1 |
| Ubuntu 16.04 LTS | wpa | 2.4-0ubuntu5 |
| openSUSE Leap 15.1 | wpa_supplicant | 2.9-lp151.5.10.1 |
| openSUSE Leap 15.2 | wpa_supplicant | 2.9-lp152.8.3.1 |
| openSUSE Tumbleweed | wpa_supplicant | 2.9-13.4 |