CVE-2015-5310

Publication date 10 November 2015

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
wpa	15.10 wily	Fixed 2.4-0ubuntu3.2
	15.04 vivid	Fixed 2.1-0ubuntu7.3
	14.04 LTS trusty	Fixed 2.1-0ubuntu1.4
	12.04 LTS precise	Not in release
wpasupplicant	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected

Severity score breakdown

Parameter	Value
Base score	4.3 · Medium
Attack vector	Adjacent
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity impact	None
Availability impact	None
Vector	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Related Ubuntu Security Notices (USN)