https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:29:18.923487+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-12092 bdu:2015-12092 2026-10-02T17:29:18.933957+00:00 bdu:2015-12092 https://cve.radiocsirt.org/vuln/cnvd-2015-03932 cnvd-2015-03932 2026-10-02T17:29:18.933994+00:00 cnvd-2015-03932 https://cve.radiocsirt.org/vuln/euvd-2026-92397 EUVD-2026-92397 2026-10-02T17:29:18.934008+00:00 EUVD-2026-92397 https://cve.radiocsirt.org/vuln/fkie_cve-2015-4141 fkie_cve-2015-4141 2026-10-02T17:29:18.934019+00:00

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/ghsa-fr6x-5vfp-hc79 GHSA-fr6x-5vfp-hc79 2026-10-02T17:29:18.934047+00:00

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/gsd-2015-4141 gsd-2015-4141 2026-10-02T17:29:18.934061+00:00 gsd-2015-4141 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2053-1 openSUSE-SU-2020:2053-1 — Security update for wpa_supplicant 2026-10-02T17:29:18.934071+00:00

Security update for wpa_supplicant

 https://cve.radiocsirt.org/vuln/suse-su-2015:2221-1 SUSE-SU-2015:2221-1 — Security update for wpa_supplicant 2026-10-02T17:29:18.934093+00:00

Security update for wpa_supplicant

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-4141 UBUNTU-CVE-2015-4141 2026-10-02T17:29:18.934106+00:00

Affected: Ubuntu:14.04:LTS: wpa

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.