CVE-2016-4476
HighSummary
Versions of hostapd from 0.6.7 to 2.5 and wpa_supplicant from 0.6.7 to 2.5 do not reject and characters in passphrase parameters, allowing remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
Risk Assessment
Attackers can exploit this vulnerability to disrupt service operations, potentially leading to network downtime and loss of availability.
Recommendation
It is recommended to update hostapd and wpa_supplicant to the latest versions that address this vulnerability.
Other vulnerabilities in hostapd, wpa_supplicant
See all- CVE-2022-23304Critical
The EAP-pwd implementations in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks due to cache access patterns. This issue exists because of an incomplete fix for CVE-2019-9495.
- CVE-2022-23303Critical
The SAE protocol implementations in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks due to cache access patterns. This issue exists because of an incomplete fix for CVE-2019-9494.
Original NVD description (English source)
hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.