CVE-2015-5314

State: Published
Severity: Not scored
Published: Feb 21, 2018
Updated: Aug 6, 2024
Reserved: Jul 1, 2015

Description

The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

USN-2808-1vendor-advisory
DSA-3397vendor-advisory
http://w1.fi/security/2015-7/eap-pwd-missing-last-fragment-length-validation.txt
[oss-security] 20151110 hostapd/wpa_supplicant: EAP-pwd missing last fragment length validationmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.