CVE-2015-0570
HighSummary
CVE-2015-0570 involves a stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN driver for Linux kernel 3.x and 4.x. This allows attackers to gain privileges via a crafted application that uses a long WPS IE element.
Risk Assessment
This vulnerability may lead to privilege escalation on systems running Linux kernels 3.x and 4.x, posing a serious security threat to devices and user data.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes security patches addressing this vulnerability and to monitor applications using WPS.
Other vulnerabilities in Sterownik WLAN dla jądra Linux 3.x i 4.x
See all- CVE-2015-0571High
The WLAN driver for Linux kernel 3.x and 4.x does not verify authorization for private SET IOCTL calls, allowing attackers to gain privileges via a crafted application.
- CVE-2015-0569High
CVE-2015-0569 involves a heap-based buffer overflow in the WLAN driver for Linux kernel 3.x and 4.x, allowing attackers to gain privileges via a crafted application that establishes a packet filter.
Original NVD description (English source)
Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element.