CVE-2016-4477
HighSummary
wpa_supplicant versions 0.4.0 through 2.5 do not reject and characters in passphrase parameters, allowing local users to trigger arbitrary library loading and consequently gain privileges or cause a denial of service (daemon outage) via a crafted SET, SET_CRED, or SET_NETWORK command.
Risk Assessment
This vulnerability may lead to privilege escalation by local users or service disruption, potentially affecting system availability.
Recommendation
It is recommended to update wpa_supplicant to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in wpa_supplicant
See all- CVE-2026-78807High
In wpa_supplicant all versions before 2.12, a missing validation in the driver-based PMKSA selection path in wpa.c allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching.
- CVE-2026-21094High
Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.
Original NVD description (English source)
wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command.