CVE-2015-5316 — wpa_supplicant: EAP-pwd peer error path failure on unexpected Confirm message

Back Back to CVE browser

MEDIUM

wpa_supplicant: EAP-pwd peer error path failure on unexpected Confirm message

Published Feb 21, 2018

5.9

MEDIUM

CVSS 3.0

EPSS 3.19%

Description

The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.

Affected products

Red Hat Enterprise Linux 5

wpa_supplicant

Not affected
Red Hat Enterprise Linux 6

wpa_supplicant

Not affected
Red Hat Enterprise Linux 7

wpa_supplicant

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	wpa_supplicant	Not affected	n/a
Red Hat Enterprise Linux 6	wpa_supplicant	Not affected	n/a
Red Hat Enterprise Linux 7	wpa_supplicant	Not affected	n/a

Remediation

Red Hat statement

Not vulnerable. This issue did not affect the versions of wpa_supplicant as shipped with Red Hat Enterprise Linux 5, 6, and 7.

Metrics

3.19% 0.03188

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03188

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.19% (0.03188)	87.63th	v5 (v2026.06.15)
Jun 15, 2026	3.37% (0.03368)	87.14th	v5 (v2026.06.15)
Mar 30, 2025	2.06% (0.02056)	82.29th	v4 (v2025.03.14)
Mar 29, 2025	4.65% (0.04651)	81.79th	v4 (v2025.03.14)
Mar 17, 2025	2.06% (0.02056)	82.68th	v4 (v2025.03.14)
Dec 12, 2024	0.76% (0.00761)	81.82th	v3 (v2023.03.01)
Apr 11, 2024	0.76% (0.00761)	80.86th	v3 (v2023.03.01)
Aug 24, 2023	0.76% (0.00761)	78.86th	v3 (v2023.03.01)
Jul 15, 2023	0.92% (0.00919)	80.77th	v3 (v2023.03.01)
Mar 22, 2023	1.52% (0.01519)	84.98th	v3 (v2023.03.01)
Mar 7, 2023	1.54% (0.01542)	85.04th	v3 (v2023.03.01)
Mar 6, 2023	1.21% (0.01213)	66.61th	v2 (v2022.01.01)
Feb 17, 2023	1.21% (0.01213)	66.22th	v2 (v2022.01.01)
Apr 1, 2022	1.21% (0.01213)	64.21th	v2 (v2022.01.01)
Feb 4, 2022	1.21% (0.01213)	40.54th	v2 (v2022.01.01)

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (10)

http://w1.fi/security/2015-8/
http://w1.fi/security/2015-8/eap-pwd-unexpected-confirm.txt
x_refsource_CONFIRMMitigationPatchVendor Advisory
http://www.openwall.com/lists/oss-security/2015/11/10/11
mailing-listx_refsource_MLISTMailing ListMitigationPatchThird Party Advisory
http://www.securityfocus.com/bid/77538
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/USN-2808-1
vendor-advisoryx_refsource_UBUNTUBroken Link
https://access.redhat.com/security/cve/CVE-2015-5316
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1277865
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2015-5316
https://www.cve.org/CVERecord?id=CVE-2015-5316
https://www.debian.org/security/2015/dsa-3397
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
http://w1.fi/security/2015-8/
http://w1.fi/security/2015-8/eap-pwd-unexpected-confirm.txt		x_refsource_CONFIRMMitigationPatchVendor Advisory
http://www.openwall.com/lists/oss-security/2015/11/10/11		mailing-listx_refsource_MLISTMailing ListMitigationPatchThird Party Advisory
http://www.securityfocus.com/bid/77538		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/USN-2808-1		vendor-advisoryx_refsource_UBUNTUBroken Link
https://access.redhat.com/security/cve/CVE-2015-5316		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1277865		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2015-5316
https://www.cve.org/CVERecord?id=CVE-2015-5316
https://www.debian.org/security/2015/dsa-3397		vendor-advisoryx_refsource_DEBIANThird Party Advisory