Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of wpasupplicant.

Impacted products: Debian.

Severity: 1/4.

Creation date: 12/11/2015.

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in wpasupplicant.

An attacker can trigger a fatal error in WPS UPnP, in order to
trigger a denial of service. [severity:1/4; CVE-2015-4141]

An attacker can trigger a fatal error in EAP-pwd, in order to
trigger a denial of service. [severity:1/4; CVE-2015-4143]

An attacker can trigger a fatal error in EAP-pwd, in order to
trigger a denial of service. [severity:1/4; CVE-2015-4144]

An attacker can trigger a fatal error in EAP-pwd, in order to
trigger a denial of service. [severity:1/4; CVE-2015-4145]

An attacker can trigger a fatal error in EAP-pwd, in order to
trigger a denial of service. [severity:1/4; CVE-2015-4146]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/wpasupplicant-five-vulnerabilities-18290