CVE-2016-4477
hostapd: wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local us...
CVE-2016-4477 is fixed in 3 products on 1 platform, first by hostapd 1:2.4-0ubuntu10, released October 15, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0026
17th percentile
wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| hostapd · Ubuntu 18.04.6 LTS (bionic) | 1:2.4-0ubuntu10 | hostapd 1:2.4-0ubuntu10 | Oct 15, 2017 |
| wpagui · Ubuntu 18.04.6 LTS (bionic) | 2.4-0ubuntu10 | wpagui 2.4-0ubuntu10 | Oct 15, 2017 |
| wpasupplicant · Ubuntu 18.04.6 LTS (bionic) | 2.4-0ubuntu10 | wpasupplicant 2.4-0ubuntu10 | Oct 15, 2017 |