Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/wpa@2.3-1%2Bdeb8u5
Typedeb
Namespacedebian
Namewpa
Version2.3-1+deb8u5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2:2.10-12+deb12u3
Latest_non_vulnerable_version2:2.10-12+deb12u3
Affected_by_vulnerabilities
0
url VCID-1ba4-zp3t-j7b7
vulnerability_id VCID-1ba4-zp3t-j7b7
summary An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd process to terminate, performing a denial of service attack. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9496.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9496.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-9496
reference_id
reference_type
scores
0
value 0.0487
scoring_system epss
scoring_elements 0.89738
published_at 2026-06-04T12:55:00Z
1
value 0.0487
scoring_system epss
scoring_elements 0.89754
published_at 2026-06-05T12:55:00Z
2
value 0.0487
scoring_system epss
scoring_elements 0.89771
published_at 2026-06-09T12:55:00Z
3
value 0.0487
scoring_system epss
scoring_elements 0.89756
published_at 2026-06-08T12:55:00Z
4
value 0.0487
scoring_system epss
scoring_elements 0.89755
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-9496
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9496
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9496
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1699153
reference_id 1699153
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1699153
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
reference_id 926801
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-9496
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ba4-zp3t-j7b7
1
url VCID-1eva-m1zn-dbbs
vulnerability_id VCID-1eva-m1zn-dbbs
summary hostapd: Public Key Exchange (PKEX) Reuse Vulnerability in hostapd
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-37660.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-37660.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-37660
reference_id
reference_type
scores
0
value 0.00177
scoring_system epss
scoring_elements 0.38917
published_at 2026-06-04T12:55:00Z
1
value 0.00177
scoring_system epss
scoring_elements 0.38966
published_at 2026-06-09T12:55:00Z
2
value 0.00177
scoring_system epss
scoring_elements 0.39005
published_at 2026-06-05T12:55:00Z
3
value 0.00177
scoring_system epss
scoring_elements 0.3901
published_at 2026-06-06T12:55:00Z
4
value 0.00177
scoring_system epss
scoring_elements 0.38981
published_at 2026-06-07T12:55:00Z
5
value 0.00177
scoring_system epss
scoring_elements 0.38954
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-37660
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37660
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37660
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2345113
reference_id 2345113
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2345113
4
reference_url https://w1.fi/cgit/hostap/commit/?id=15af83cf1846870873a011ed4d714732f01cd2e4
reference_id ?id=15af83cf1846870873a011ed4d714732f01cd2e4
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-13T14:18:13Z/
url https://w1.fi/cgit/hostap/commit/?id=15af83cf1846870873a011ed4d714732f01cd2e4
5
reference_url https://link.springer.com/article/10.1007/s10207-025-00988-3
reference_id s10207-025-00988-3
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-13T14:18:13Z/
url https://link.springer.com/article/10.1007/s10207-025-00988-3
6
reference_url https://usn.ubuntu.com/7317-1/
reference_id USN-7317-1
reference_type
scores
url https://usn.ubuntu.com/7317-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.10-12%2Bdeb12u3
purl pkg:deb/debian/wpa@2:2.10-12%2Bdeb12u3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.10-12%252Bdeb12u3
aliases CVE-2022-37660
risk_score 3.4
exploitability 0.5
weighted_severity 6.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1eva-m1zn-dbbs
2
url VCID-2pae-t1zg-d7dy
vulnerability_id VCID-2pae-t1zg-d7dy
summary information disclosure
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14526.json
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14526.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14526
reference_id
reference_type
scores
0
value 0.00964
scoring_system epss
scoring_elements 0.76928
published_at 2026-06-06T12:55:00Z
1
value 0.00964
scoring_system epss
scoring_elements 0.76916
published_at 2026-06-07T12:55:00Z
2
value 0.00964
scoring_system epss
scoring_elements 0.76927
published_at 2026-06-09T12:55:00Z
3
value 0.00964
scoring_system epss
scoring_elements 0.76905
published_at 2026-06-08T12:55:00Z
4
value 0.01209
scoring_system epss
scoring_elements 0.79333
published_at 2026-06-05T12:55:00Z
5
value 0.01209
scoring_system epss
scoring_elements 0.79306
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14526
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14526
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14526
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1614520
reference_id 1614520
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1614520
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905739
reference_id 905739
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905739
6
reference_url https://security.archlinux.org/AVG-752
reference_id AVG-752
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-752
7
reference_url https://access.redhat.com/errata/RHSA-2018:3107
reference_id RHSA-2018:3107
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3107
8
reference_url https://usn.ubuntu.com/3745-1/
reference_id USN-3745-1
reference_type
scores
url https://usn.ubuntu.com/3745-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2018-14526
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2pae-t1zg-d7dy
3
url VCID-2u68-nqzd-pqcu
vulnerability_id VCID-2u68-nqzd-pqcu
summary The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5316.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5316.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5316
reference_id
reference_type
scores
0
value 0.01524
scoring_system epss
scoring_elements 0.81597
published_at 2026-06-04T12:55:00Z
1
value 0.01524
scoring_system epss
scoring_elements 0.81627
published_at 2026-06-05T12:55:00Z
2
value 0.01524
scoring_system epss
scoring_elements 0.81628
published_at 2026-06-07T12:55:00Z
3
value 0.01524
scoring_system epss
scoring_elements 0.81622
published_at 2026-06-08T12:55:00Z
4
value 0.01524
scoring_system epss
scoring_elements 0.81636
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5316
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1277865
reference_id 1277865
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1277865
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804710
reference_id 804710
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804710
15
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5316
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2u68-nqzd-pqcu
4
url VCID-57qp-9n3e-g7g7
vulnerability_id VCID-57qp-9n3e-g7g7
summary wpa_supplicant: SAE side channel attacks as a result of cache access patterns
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23303.json
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23303.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-23303
reference_id
reference_type
scores
0
value 0.00403
scoring_system epss
scoring_elements 0.61192
published_at 2026-06-04T12:55:00Z
1
value 0.00403
scoring_system epss
scoring_elements 0.61241
published_at 2026-06-05T12:55:00Z
2
value 0.00403
scoring_system epss
scoring_elements 0.61248
published_at 2026-06-06T12:55:00Z
3
value 0.00403
scoring_system epss
scoring_elements 0.61235
published_at 2026-06-07T12:55:00Z
4
value 0.00403
scoring_system epss
scoring_elements 0.61217
published_at 2026-06-08T12:55:00Z
5
value 0.00403
scoring_system epss
scoring_elements 0.61237
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-23303
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23303
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23303
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2044602
reference_id 2044602
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2044602
5
reference_url https://security.gentoo.org/glsa/202309-16
reference_id GLSA-202309-16
reference_type
scores
url https://security.gentoo.org/glsa/202309-16
6
reference_url https://usn.ubuntu.com/7317-1/
reference_id USN-7317-1
reference_type
scores
url https://usn.ubuntu.com/7317-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.10-12%2Bdeb12u3
purl pkg:deb/debian/wpa@2:2.10-12%2Bdeb12u3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.10-12%252Bdeb12u3
aliases CVE-2022-23303
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-57qp-9n3e-g7g7
5
url VCID-5uqd-9srx-buhb
vulnerability_id VCID-5uqd-9srx-buhb
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-27803.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-27803.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-27803
reference_id
reference_type
scores
0
value 0.00827
scoring_system epss
scoring_elements 0.74843
published_at 2026-06-04T12:55:00Z
1
value 0.00827
scoring_system epss
scoring_elements 0.74879
published_at 2026-06-06T12:55:00Z
2
value 0.00827
scoring_system epss
scoring_elements 0.74873
published_at 2026-06-05T12:55:00Z
3
value 0.00827
scoring_system epss
scoring_elements 0.74881
published_at 2026-06-09T12:55:00Z
4
value 0.00827
scoring_system epss
scoring_elements 0.74854
published_at 2026-06-08T12:55:00Z
5
value 0.00827
scoring_system epss
scoring_elements 0.7487
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-27803
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27803
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
reference_id 0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
7
reference_url http://www.openwall.com/lists/oss-security/2021/02/27/1
reference_id 1
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url http://www.openwall.com/lists/oss-security/2021/02/27/1
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1933361
reference_id 1933361
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1933361
9
reference_url https://www.openwall.com/lists/oss-security/2021/02/25/3
reference_id 3
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://www.openwall.com/lists/oss-security/2021/02/25/3
10
reference_url https://security.archlinux.org/AVG-1626
reference_id AVG-1626
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1626
11
reference_url https://www.debian.org/security/2021/dsa-4898
reference_id dsa-4898
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://www.debian.org/security/2021/dsa-4898
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZGUR5XFHATVXTRAEJMODS7ROYHA56NX/
reference_id IZGUR5XFHATVXTRAEJMODS7ROYHA56NX
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZGUR5XFHATVXTRAEJMODS7ROYHA56NX/
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF/
reference_id KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF/
14
reference_url https://lists.debian.org/debian-lts-announce/2021/03/msg00003.html
reference_id msg00003.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://lists.debian.org/debian-lts-announce/2021/03/msg00003.html
15
reference_url https://access.redhat.com/errata/RHSA-2021:0808
reference_id RHSA-2021:0808
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0808
16
reference_url https://access.redhat.com/errata/RHSA-2021:0809
reference_id RHSA-2021:0809
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0809
17
reference_url https://access.redhat.com/errata/RHSA-2021:0816
reference_id RHSA-2021:0816
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0816
18
reference_url https://access.redhat.com/errata/RHSA-2021:0818
reference_id RHSA-2021:0818
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0818
19
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4/
reference_id SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4/
20
reference_url https://usn.ubuntu.com/4757-1/
reference_id USN-4757-1
reference_type
scores
url https://usn.ubuntu.com/4757-1/
21
reference_url https://usn.ubuntu.com/4757-2/
reference_id USN-4757-2
reference_type
scores
url https://usn.ubuntu.com/4757-2/
22
reference_url https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt
reference_id wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-18T14:57:24Z/
url https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
1
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2021-27803
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5uqd-9srx-buhb
6
url VCID-64pb-r9pk-3bfk
vulnerability_id VCID-64pb-r9pk-3bfk
summary The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13377.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13377.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-13377
reference_id
reference_type
scores
0
value 0.0058
scoring_system epss
scoring_elements 0.69263
published_at 2026-06-04T12:55:00Z
1
value 0.0058
scoring_system epss
scoring_elements 0.69303
published_at 2026-06-05T12:55:00Z
2
value 0.0058
scoring_system epss
scoring_elements 0.69312
published_at 2026-06-06T12:55:00Z
3
value 0.0058
scoring_system epss
scoring_elements 0.69302
published_at 2026-06-07T12:55:00Z
4
value 0.0058
scoring_system epss
scoring_elements 0.69287
published_at 2026-06-08T12:55:00Z
5
value 0.0058
scoring_system epss
scoring_elements 0.69307
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-13377
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13377
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1737665
reference_id 1737665
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1737665
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934180
reference_id 934180
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934180
7
reference_url https://usn.ubuntu.com/4098-1/
reference_id USN-4098-1
reference_type
scores
url https://usn.ubuntu.com/4098-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
1
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2019-13377
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-64pb-r9pk-3bfk
7
url VCID-6jb3-mw38-gqaf
vulnerability_id VCID-6jb3-mw38-gqaf
summary wpa_supplicant: EAP-pwd side-channel attacks as a result of cache access patterns
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23304.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23304.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-23304
reference_id
reference_type
scores
0
value 0.00094
scoring_system epss
scoring_elements 0.26135
published_at 2026-06-04T12:55:00Z
1
value 0.00094
scoring_system epss
scoring_elements 0.26239
published_at 2026-06-05T12:55:00Z
2
value 0.00094
scoring_system epss
scoring_elements 0.26232
published_at 2026-06-06T12:55:00Z
3
value 0.00094
scoring_system epss
scoring_elements 0.26186
published_at 2026-06-07T12:55:00Z
4
value 0.00094
scoring_system epss
scoring_elements 0.2613
published_at 2026-06-08T12:55:00Z
5
value 0.00094
scoring_system epss
scoring_elements 0.26136
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-23304
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23304
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23304
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2044599
reference_id 2044599
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2044599
5
reference_url https://security.gentoo.org/glsa/202309-16
reference_id GLSA-202309-16
reference_type
scores
url https://security.gentoo.org/glsa/202309-16
6
reference_url https://usn.ubuntu.com/7317-1/
reference_id USN-7317-1
reference_type
scores
url https://usn.ubuntu.com/7317-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.10-12%2Bdeb12u3
purl pkg:deb/debian/wpa@2:2.10-12%2Bdeb12u3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.10-12%252Bdeb12u3
aliases CVE-2022-23304
risk_score 3.1
exploitability 0.5
weighted_severity 6.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6jb3-mw38-gqaf
8
url VCID-7fuh-9z2r-ekee
vulnerability_id VCID-7fuh-9z2r-ekee
summary wpa_supplicant: potential authorization bypass
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52160.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-52160.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-52160
reference_id
reference_type
scores
0
value 0.0417
scoring_system epss
scoring_elements 0.88915
published_at 2026-06-09T12:55:00Z
1
value 0.0417
scoring_system epss
scoring_elements 0.88899
published_at 2026-06-06T12:55:00Z
2
value 0.0417
scoring_system epss
scoring_elements 0.88898
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-52160
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064061
reference_id 1064061
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064061
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2264593
reference_id 2264593
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2264593
6
reference_url https://w1.fi/cgit/hostap/commit/?id=8e6485a1bcb0baffdea9e55255a81270b768439c
reference_id ?id=8e6485a1bcb0baffdea9e55255a81270b768439c
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-27T19:43:25Z/
url https://w1.fi/cgit/hostap/commit/?id=8e6485a1bcb0baffdea9e55255a81270b768439c
7
reference_url https://lists.debian.org/debian-lts-announce/2024/02/msg00013.html
reference_id msg00013.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-27T19:43:25Z/
url https://lists.debian.org/debian-lts-announce/2024/02/msg00013.html
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N46C4DTVUWK336OYDA4LGALSC5VVPTCC/
reference_id N46C4DTVUWK336OYDA4LGALSC5VVPTCC
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-27T19:43:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N46C4DTVUWK336OYDA4LGALSC5VVPTCC/
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI/
reference_id QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-27T19:43:25Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI/
10
reference_url https://access.redhat.com/errata/RHSA-2024:2517
reference_id RHSA-2024:2517
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2517
11
reference_url https://www.top10vpn.com/research/wifi-vulnerabilities/
reference_id wifi-vulnerabilities
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-27T19:43:25Z/
url https://www.top10vpn.com/research/wifi-vulnerabilities/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2023-52160
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7fuh-9z2r-ekee
9
url VCID-7kes-xst7-z3d3
vulnerability_id VCID-7kes-xst7-z3d3
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13086.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13086.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13086
reference_id
reference_type
scores
0
value 0.00463
scoring_system epss
scoring_elements 0.64669
published_at 2026-06-09T12:55:00Z
1
value 0.00463
scoring_system epss
scoring_elements 0.64622
published_at 2026-06-04T12:55:00Z
2
value 0.00463
scoring_system epss
scoring_elements 0.64661
published_at 2026-06-07T12:55:00Z
3
value 0.00463
scoring_system epss
scoring_elements 0.64673
published_at 2026-06-06T12:55:00Z
4
value 0.00463
scoring_system epss
scoring_elements 0.64651
published_at 2026-06-08T12:55:00Z
5
value 0.00463
scoring_system epss
scoring_elements 0.64663
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13086
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500302
reference_id 1500302
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500302
13
reference_url https://security.archlinux.org/AVG-453
reference_id AVG-453
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-453
14
reference_url https://security.archlinux.org/AVG-454
reference_id AVG-454
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-454
15
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
16
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
17
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13086
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7kes-xst7-z3d3
10
url VCID-7q6k-mpk6-t7bv
vulnerability_id VCID-7q6k-mpk6-t7bv
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13082.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13082.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13082
reference_id
reference_type
scores
0
value 0.0043
scoring_system epss
scoring_elements 0.62899
published_at 2026-06-08T12:55:00Z
1
value 0.0043
scoring_system epss
scoring_elements 0.62924
published_at 2026-06-06T12:55:00Z
2
value 0.0043
scoring_system epss
scoring_elements 0.62872
published_at 2026-06-04T12:55:00Z
3
value 0.0043
scoring_system epss
scoring_elements 0.62914
published_at 2026-06-09T12:55:00Z
4
value 0.0043
scoring_system epss
scoring_elements 0.62913
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13082
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491698
reference_id 1491698
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491698
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13082
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7q6k-mpk6-t7bv
11
url VCID-7y9t-7akx-afg7
vulnerability_id VCID-7y9t-7akx-afg7
summary The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4141.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4141.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4141
reference_id
reference_type
scores
0
value 0.01465
scoring_system epss
scoring_elements 0.81221
published_at 2026-06-04T12:55:00Z
1
value 0.01465
scoring_system epss
scoring_elements 0.81249
published_at 2026-06-05T12:55:00Z
2
value 0.01465
scoring_system epss
scoring_elements 0.81251
published_at 2026-06-06T12:55:00Z
3
value 0.01465
scoring_system epss
scoring_elements 0.81248
published_at 2026-06-07T12:55:00Z
4
value 0.01465
scoring_system epss
scoring_elements 0.81244
published_at 2026-06-08T12:55:00Z
5
value 0.01465
scoring_system epss
scoring_elements 0.81261
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4141
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1221172
reference_id 1221172
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1221172
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787372
reference_id 787372
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787372
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4141
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7y9t-7akx-afg7
12
url VCID-84gv-j3vy-kbhp
vulnerability_id VCID-84gv-j3vy-kbhp
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13081.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13081.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13081
reference_id
reference_type
scores
0
value 0.0111
scoring_system epss
scoring_elements 0.78511
published_at 2026-06-09T12:55:00Z
1
value 0.0111
scoring_system epss
scoring_elements 0.78482
published_at 2026-06-04T12:55:00Z
2
value 0.0111
scoring_system epss
scoring_elements 0.78506
published_at 2026-06-07T12:55:00Z
3
value 0.0111
scoring_system epss
scoring_elements 0.78517
published_at 2026-06-06T12:55:00Z
4
value 0.0111
scoring_system epss
scoring_elements 0.78493
published_at 2026-06-08T12:55:00Z
5
value 0.0111
scoring_system epss
scoring_elements 0.78508
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13081
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491697
reference_id 1491697
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491697
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
19
reference_url https://usn.ubuntu.com/3505-1/
reference_id USN-3505-1
reference_type
scores
url https://usn.ubuntu.com/3505-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13081
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-84gv-j3vy-kbhp
13
url VCID-8d56-3k4a-c7hy
vulnerability_id VCID-8d56-3k4a-c7hy
summary The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5314
reference_id
reference_type
scores
0
value 0.0115
scoring_system epss
scoring_elements 0.78829
published_at 2026-06-04T12:55:00Z
1
value 0.0115
scoring_system epss
scoring_elements 0.78855
published_at 2026-06-05T12:55:00Z
2
value 0.0115
scoring_system epss
scoring_elements 0.78862
published_at 2026-06-06T12:55:00Z
3
value 0.0115
scoring_system epss
scoring_elements 0.78853
published_at 2026-06-07T12:55:00Z
4
value 0.0115
scoring_system epss
scoring_elements 0.78842
published_at 2026-06-08T12:55:00Z
5
value 0.0115
scoring_system epss
scoring_elements 0.78859
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5314
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
reference_id 804708
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
13
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5314
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8d56-3k4a-c7hy
14
url VCID-awmy-cpam-xqah
vulnerability_id VCID-awmy-cpam-xqah
summary The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9495.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-9495
reference_id
reference_type
scores
0
value 0.06885
scoring_system epss
scoring_elements 0.91537
published_at 2026-06-04T12:55:00Z
1
value 0.06885
scoring_system epss
scoring_elements 0.9155
published_at 2026-06-05T12:55:00Z
2
value 0.06885
scoring_system epss
scoring_elements 0.91551
published_at 2026-06-06T12:55:00Z
3
value 0.06885
scoring_system epss
scoring_elements 0.91549
published_at 2026-06-07T12:55:00Z
4
value 0.06885
scoring_system epss
scoring_elements 0.91546
published_at 2026-06-08T12:55:00Z
5
value 0.06885
scoring_system epss
scoring_elements 0.9156
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-9495
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1699149
reference_id 1699149
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1699149
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
reference_id 926801
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
9
reference_url https://usn.ubuntu.com/3944-1/
reference_id USN-3944-1
reference_type
scores
url https://usn.ubuntu.com/3944-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-9495
risk_score 3.1
exploitability 0.5
weighted_severity 6.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-awmy-cpam-xqah
15
url VCID-b8k9-3pnn-ekgs
vulnerability_id VCID-b8k9-3pnn-ekgs
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13078.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13078.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13078
reference_id
reference_type
scores
0
value 0.00813
scoring_system epss
scoring_elements 0.74655
published_at 2026-06-09T12:55:00Z
1
value 0.00813
scoring_system epss
scoring_elements 0.74621
published_at 2026-06-04T12:55:00Z
2
value 0.00813
scoring_system epss
scoring_elements 0.74646
published_at 2026-06-07T12:55:00Z
3
value 0.00813
scoring_system epss
scoring_elements 0.74658
published_at 2026-06-06T12:55:00Z
4
value 0.00813
scoring_system epss
scoring_elements 0.74629
published_at 2026-06-08T12:55:00Z
5
value 0.00813
scoring_system epss
scoring_elements 0.74653
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13078
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491693
reference_id 1491693
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491693
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13078
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b8k9-3pnn-ekgs
16
url VCID-bugv-6pzr-tuhy
vulnerability_id VCID-bugv-6pzr-tuhy
summary Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8041.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8041.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8041
reference_id
reference_type
scores
0
value 0.0158
scoring_system epss
scoring_elements 0.81912
published_at 2026-06-04T12:55:00Z
1
value 0.0158
scoring_system epss
scoring_elements 0.81946
published_at 2026-06-05T12:55:00Z
2
value 0.0158
scoring_system epss
scoring_elements 0.81947
published_at 2026-06-06T12:55:00Z
3
value 0.0158
scoring_system epss
scoring_elements 0.81948
published_at 2026-06-07T12:55:00Z
4
value 0.0158
scoring_system epss
scoring_elements 0.81941
published_at 2026-06-08T12:55:00Z
5
value 0.0158
scoring_system epss
scoring_elements 0.81956
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8041
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1241905
reference_id 1241905
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1241905
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795740
reference_id 795740
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795740
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-8041
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bugv-6pzr-tuhy
17
url VCID-c1uc-msuh-bbgq
vulnerability_id VCID-c1uc-msuh-bbgq
summary The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service (memory leak) via a crafted message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4145.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4145.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4145
reference_id
reference_type
scores
0
value 0.01205
scoring_system epss
scoring_elements 0.79284
published_at 2026-06-04T12:55:00Z
1
value 0.01205
scoring_system epss
scoring_elements 0.7931
published_at 2026-06-05T12:55:00Z
2
value 0.01205
scoring_system epss
scoring_elements 0.79315
published_at 2026-06-09T12:55:00Z
3
value 0.01205
scoring_system epss
scoring_elements 0.79308
published_at 2026-06-07T12:55:00Z
4
value 0.01205
scoring_system epss
scoring_elements 0.79297
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4145
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4145
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c1uc-msuh-bbgq
18
url VCID-c6rb-kwrq-uubn
vulnerability_id VCID-c6rb-kwrq-uubn
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-0326.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-0326.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-0326
reference_id
reference_type
scores
0
value 0.1638
scoring_system epss
scoring_elements 0.94986
published_at 2026-06-04T12:55:00Z
1
value 0.1638
scoring_system epss
scoring_elements 0.95002
published_at 2026-06-09T12:55:00Z
2
value 0.1638
scoring_system epss
scoring_elements 0.94998
published_at 2026-06-07T12:55:00Z
3
value 0.1638
scoring_system epss
scoring_elements 0.94997
published_at 2026-06-08T12:55:00Z
4
value 0.1638
scoring_system epss
scoring_elements 0.94994
published_at 2026-06-05T12:55:00Z
5
value 0.1638
scoring_system epss
scoring_elements 0.94995
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-0326
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27803
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1925152
reference_id 1925152
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1925152
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=981971
reference_id 981971
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=981971
8
reference_url https://security.archlinux.org/ASA-202102-25
reference_id ASA-202102-25
reference_type
scores
url https://security.archlinux.org/ASA-202102-25
9
reference_url https://security.archlinux.org/AVG-1530
reference_id AVG-1530
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1530
10
reference_url https://access.redhat.com/errata/RHSA-2021:1686
reference_id RHSA-2021:1686
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1686
11
reference_url https://usn.ubuntu.com/4734-1/
reference_id USN-4734-1
reference_type
scores
url https://usn.ubuntu.com/4734-1/
12
reference_url https://usn.ubuntu.com/4734-2/
reference_id USN-4734-2
reference_type
scores
url https://usn.ubuntu.com/4734-2/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
1
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2021-0326
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c6rb-kwrq-uubn
19
url VCID-cmpu-sjnc-qyc9
vulnerability_id VCID-cmpu-sjnc-qyc9
summary hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10064.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10064.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10064
reference_id
reference_type
scores
0
value 0.01405
scoring_system epss
scoring_elements 0.80797
published_at 2026-06-04T12:55:00Z
1
value 0.01405
scoring_system epss
scoring_elements 0.80825
published_at 2026-06-05T12:55:00Z
2
value 0.01405
scoring_system epss
scoring_elements 0.80826
published_at 2026-06-06T12:55:00Z
3
value 0.01405
scoring_system epss
scoring_elements 0.80824
published_at 2026-06-07T12:55:00Z
4
value 0.01405
scoring_system epss
scoring_elements 0.8082
published_at 2026-06-08T12:55:00Z
5
value 0.01405
scoring_system epss
scoring_elements 0.80839
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10064
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10064
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10064
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1811069
reference_id 1811069
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1811069
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-10064
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cmpu-sjnc-qyc9
20
url VCID-d17v-v7yt-5kb3
vulnerability_id VCID-d17v-v7yt-5kb3
summary The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9498.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-9498
reference_id
reference_type
scores
0
value 0.00794
scoring_system epss
scoring_elements 0.74298
published_at 2026-06-04T12:55:00Z
1
value 0.00794
scoring_system epss
scoring_elements 0.74331
published_at 2026-06-09T12:55:00Z
2
value 0.00794
scoring_system epss
scoring_elements 0.74304
published_at 2026-06-08T12:55:00Z
3
value 0.00794
scoring_system epss
scoring_elements 0.74336
published_at 2026-06-06T12:55:00Z
4
value 0.00794
scoring_system epss
scoring_elements 0.74322
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-9498
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1699168
reference_id 1699168
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1699168
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
reference_id 926801
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
9
reference_url https://usn.ubuntu.com/3944-1/
reference_id USN-3944-1
reference_type
scores
url https://usn.ubuntu.com/3944-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-9498
risk_score 3.0
exploitability 0.5
weighted_severity 6.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d17v-v7yt-5kb3
21
url VCID-dc5z-thyu-sqhb
vulnerability_id VCID-dc5z-thyu-sqhb
summary The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11555.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11555.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-11555
reference_id
reference_type
scores
0
value 0.09377
scoring_system epss
scoring_elements 0.92932
published_at 2026-06-08T12:55:00Z
1
value 0.09377
scoring_system epss
scoring_elements 0.92942
published_at 2026-06-09T12:55:00Z
2
value 0.09377
scoring_system epss
scoring_elements 0.92939
published_at 2026-06-06T12:55:00Z
3
value 0.09377
scoring_system epss
scoring_elements 0.92934
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-11555
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1703417
reference_id 1703417
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1703417
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927463
reference_id 927463
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927463
6
reference_url https://security.gentoo.org/glsa/201908-25
reference_id GLSA-201908-25
reference_type
scores
url https://security.gentoo.org/glsa/201908-25
7
reference_url https://usn.ubuntu.com/3969-1/
reference_id USN-3969-1
reference_type
scores
url https://usn.ubuntu.com/3969-1/
8
reference_url https://usn.ubuntu.com/3969-2/
reference_id USN-3969-2
reference_type
scores
url https://usn.ubuntu.com/3969-2/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-11555
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dc5z-thyu-sqhb
22
url VCID-dvkq-285n-9kaw
vulnerability_id VCID-dvkq-285n-9kaw
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4477.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4477.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4477
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32296
published_at 2026-06-09T12:55:00Z
1
value 0.00132
scoring_system epss
scoring_elements 0.32341
published_at 2026-06-06T12:55:00Z
2
value 0.00132
scoring_system epss
scoring_elements 0.32303
published_at 2026-06-07T12:55:00Z
3
value 0.00132
scoring_system epss
scoring_elements 0.32273
published_at 2026-06-08T12:55:00Z
4
value 0.00132
scoring_system epss
scoring_elements 0.32299
published_at 2026-06-04T12:55:00Z
5
value 0.00132
scoring_system epss
scoring_elements 0.32372
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4477
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4477
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1332423
reference_id 1332423
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1332423
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823411
reference_id 823411
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823411
6
reference_url https://security.archlinux.org/ASA-201610-3
reference_id ASA-201610-3
reference_type
scores
url https://security.archlinux.org/ASA-201610-3
7
reference_url https://security.archlinux.org/ASA-201610-7
reference_id ASA-201610-7
reference_type
scores
url https://security.archlinux.org/ASA-201610-7
8
reference_url https://security.archlinux.org/AVG-10
reference_id AVG-10
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-10
9
reference_url https://security.archlinux.org/AVG-11
reference_id AVG-11
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-11
10
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2016-4477
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dvkq-285n-9kaw
23
url VCID-edpz-qhd8-jfez
vulnerability_id VCID-edpz-qhd8-jfez
summary The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5315.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5315.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5315
reference_id
reference_type
scores
0
value 0.0115
scoring_system epss
scoring_elements 0.78829
published_at 2026-06-04T12:55:00Z
1
value 0.0115
scoring_system epss
scoring_elements 0.78855
published_at 2026-06-05T12:55:00Z
2
value 0.0115
scoring_system epss
scoring_elements 0.78862
published_at 2026-06-06T12:55:00Z
3
value 0.0115
scoring_system epss
scoring_elements 0.78853
published_at 2026-06-07T12:55:00Z
4
value 0.0115
scoring_system epss
scoring_elements 0.78842
published_at 2026-06-08T12:55:00Z
5
value 0.0115
scoring_system epss
scoring_elements 0.78859
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5315
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1278377
reference_id 1278377
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1278377
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
reference_id 804708
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
15
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5315
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-edpz-qhd8-jfez
24
url VCID-fwsj-n5rh-53h1
vulnerability_id VCID-fwsj-n5rh-53h1
summary Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4142.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4142.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4142
reference_id
reference_type
scores
0
value 0.07071
scoring_system epss
scoring_elements 0.91661
published_at 2026-06-04T12:55:00Z
1
value 0.07071
scoring_system epss
scoring_elements 0.91673
published_at 2026-06-05T12:55:00Z
2
value 0.07071
scoring_system epss
scoring_elements 0.91675
published_at 2026-06-06T12:55:00Z
3
value 0.07071
scoring_system epss
scoring_elements 0.91672
published_at 2026-06-07T12:55:00Z
4
value 0.07071
scoring_system epss
scoring_elements 0.91671
published_at 2026-06-08T12:55:00Z
5
value 0.07071
scoring_system epss
scoring_elements 0.91685
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4142
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1221178
reference_id 1221178
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1221178
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787373
reference_id 787373
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787373
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://access.redhat.com/errata/RHSA-2015:1090
reference_id RHSA-2015:1090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1090
17
reference_url https://access.redhat.com/errata/RHSA-2015:1439
reference_id RHSA-2015:1439
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1439
18
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4142
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fwsj-n5rh-53h1
25
url VCID-hxn4-6y6j-83cz
vulnerability_id VCID-hxn4-6y6j-83cz
summary The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5310.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5310.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5310
reference_id
reference_type
scores
0
value 0.00304
scoring_system epss
scoring_elements 0.53929
published_at 2026-06-04T12:55:00Z
1
value 0.00304
scoring_system epss
scoring_elements 0.53987
published_at 2026-06-05T12:55:00Z
2
value 0.00304
scoring_system epss
scoring_elements 0.53994
published_at 2026-06-06T12:55:00Z
3
value 0.00304
scoring_system epss
scoring_elements 0.53983
published_at 2026-06-09T12:55:00Z
4
value 0.00304
scoring_system epss
scoring_elements 0.5396
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5310
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1277857
reference_id 1277857
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1277857
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804707
reference_id 804707
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804707
15
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5310
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hxn4-6y6j-83cz
26
url VCID-kj7b-sur9-hfhb
vulnerability_id VCID-kj7b-sur9-hfhb
summary An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different denial of service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby Aps of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-5061
reference_id
reference_type
scores
0
value 0.0029
scoring_system epss
scoring_elements 0.52699
published_at 2026-06-04T12:55:00Z
1
value 0.0029
scoring_system epss
scoring_elements 0.52758
published_at 2026-06-05T12:55:00Z
2
value 0.0029
scoring_system epss
scoring_elements 0.52764
published_at 2026-06-06T12:55:00Z
3
value 0.0029
scoring_system epss
scoring_elements 0.52746
published_at 2026-06-09T12:55:00Z
4
value 0.0029
scoring_system epss
scoring_elements 0.5272
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-5061
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5061
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5061
fixed_packages
0
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2019-5061
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kj7b-sur9-hfhb
27
url VCID-kyvg-q58s-cfff
vulnerability_id VCID-kyvg-q58s-cfff
summary The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4144.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4144.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4144
reference_id
reference_type
scores
0
value 0.01205
scoring_system epss
scoring_elements 0.79284
published_at 2026-06-04T12:55:00Z
1
value 0.01205
scoring_system epss
scoring_elements 0.7931
published_at 2026-06-05T12:55:00Z
2
value 0.01205
scoring_system epss
scoring_elements 0.79315
published_at 2026-06-09T12:55:00Z
3
value 0.01205
scoring_system epss
scoring_elements 0.79308
published_at 2026-06-07T12:55:00Z
4
value 0.01205
scoring_system epss
scoring_elements 0.79297
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4144
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4144
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kyvg-q58s-cfff
28
url VCID-m6c2-crap-b3b7
vulnerability_id VCID-m6c2-crap-b3b7
summary The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9499.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-9499
reference_id
reference_type
scores
0
value 0.00794
scoring_system epss
scoring_elements 0.74298
published_at 2026-06-04T12:55:00Z
1
value 0.00794
scoring_system epss
scoring_elements 0.74331
published_at 2026-06-09T12:55:00Z
2
value 0.00794
scoring_system epss
scoring_elements 0.74304
published_at 2026-06-08T12:55:00Z
3
value 0.00794
scoring_system epss
scoring_elements 0.74336
published_at 2026-06-06T12:55:00Z
4
value 0.00794
scoring_system epss
scoring_elements 0.74322
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-9499
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1699170
reference_id 1699170
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1699170
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
reference_id 926801
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
9
reference_url https://usn.ubuntu.com/3944-1/
reference_id USN-3944-1
reference_type
scores
url https://usn.ubuntu.com/3944-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-9499
risk_score 3.0
exploitability 0.5
weighted_severity 6.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m6c2-crap-b3b7
29
url VCID-mwc1-rpqz-uqcj
vulnerability_id VCID-mwc1-rpqz-uqcj
summary The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4143.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4143.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4143
reference_id
reference_type
scores
0
value 0.01205
scoring_system epss
scoring_elements 0.79284
published_at 2026-06-04T12:55:00Z
1
value 0.01205
scoring_system epss
scoring_elements 0.7931
published_at 2026-06-05T12:55:00Z
2
value 0.01205
scoring_system epss
scoring_elements 0.79315
published_at 2026-06-09T12:55:00Z
3
value 0.01205
scoring_system epss
scoring_elements 0.79308
published_at 2026-06-07T12:55:00Z
4
value 0.01205
scoring_system epss
scoring_elements 0.79297
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4143
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4143
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mwc1-rpqz-uqcj
30
url VCID-n7rh-f4mj-jbdq
vulnerability_id VCID-n7rh-f4mj-jbdq
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13080.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13080.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13080
reference_id
reference_type
scores
0
value 0.00948
scoring_system epss
scoring_elements 0.76718
published_at 2026-06-08T12:55:00Z
1
value 0.00948
scoring_system epss
scoring_elements 0.7674
published_at 2026-06-09T12:55:00Z
2
value 0.00948
scoring_system epss
scoring_elements 0.76704
published_at 2026-06-04T12:55:00Z
3
value 0.00948
scoring_system epss
scoring_elements 0.76734
published_at 2026-06-05T12:55:00Z
4
value 0.00948
scoring_system epss
scoring_elements 0.76729
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13080
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491696
reference_id 1491696
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491696
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
21
reference_url https://usn.ubuntu.com/3505-1/
reference_id USN-3505-1
reference_type
scores
url https://usn.ubuntu.com/3505-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13080
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n7rh-f4mj-jbdq
31
url VCID-p4b2-1g26-nkd2
vulnerability_id VCID-p4b2-1g26-nkd2
summary hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16275.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16275.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-16275
reference_id
reference_type
scores
0
value 0.00626
scoring_system epss
scoring_elements 0.70594
published_at 2026-06-04T12:55:00Z
1
value 0.00626
scoring_system epss
scoring_elements 0.70636
published_at 2026-06-05T12:55:00Z
2
value 0.00626
scoring_system epss
scoring_elements 0.70645
published_at 2026-06-06T12:55:00Z
3
value 0.00626
scoring_system epss
scoring_elements 0.70628
published_at 2026-06-07T12:55:00Z
4
value 0.00626
scoring_system epss
scoring_elements 0.70616
published_at 2026-06-08T12:55:00Z
5
value 0.00626
scoring_system epss
scoring_elements 0.70638
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-16275
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13377
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1767023
reference_id 1767023
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1767023
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940080
reference_id 940080
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940080
7
reference_url https://usn.ubuntu.com/4136-1/
reference_id USN-4136-1
reference_type
scores
url https://usn.ubuntu.com/4136-1/
8
reference_url https://usn.ubuntu.com/4136-2/
reference_id USN-4136-2
reference_type
scores
url https://usn.ubuntu.com/4136-2/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
1
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2019-16275
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p4b2-1g26-nkd2
32
url VCID-p6m7-m2w8-uybh
vulnerability_id VCID-p6m7-m2w8-uybh
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13077.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13077.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13077
reference_id
reference_type
scores
0
value 0.00661
scoring_system epss
scoring_elements 0.71554
published_at 2026-06-09T12:55:00Z
1
value 0.00661
scoring_system epss
scoring_elements 0.71521
published_at 2026-06-04T12:55:00Z
2
value 0.00661
scoring_system epss
scoring_elements 0.71547
published_at 2026-06-07T12:55:00Z
3
value 0.00661
scoring_system epss
scoring_elements 0.71571
published_at 2026-06-06T12:55:00Z
4
value 0.00661
scoring_system epss
scoring_elements 0.71532
published_at 2026-06-08T12:55:00Z
5
value 0.00661
scoring_system epss
scoring_elements 0.71565
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13077
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491692
reference_id 1491692
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491692
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13077
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p6m7-m2w8-uybh
33
url VCID-qv3p-mcnx-gfh9
vulnerability_id VCID-qv3p-mcnx-gfh9
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4476.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4476.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4476
reference_id
reference_type
scores
0
value 0.00668
scoring_system epss
scoring_elements 0.71714
published_at 2026-06-09T12:55:00Z
1
value 0.00668
scoring_system epss
scoring_elements 0.7173
published_at 2026-06-06T12:55:00Z
2
value 0.00668
scoring_system epss
scoring_elements 0.71707
published_at 2026-06-07T12:55:00Z
3
value 0.00668
scoring_system epss
scoring_elements 0.71692
published_at 2026-06-08T12:55:00Z
4
value 0.00668
scoring_system epss
scoring_elements 0.71683
published_at 2026-06-04T12:55:00Z
5
value 0.00668
scoring_system epss
scoring_elements 0.71724
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4476
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4476
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4476
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.9
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:N/I:N/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1332422
reference_id 1332422
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1332422
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823411
reference_id 823411
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823411
6
reference_url https://security.archlinux.org/ASA-201610-3
reference_id ASA-201610-3
reference_type
scores
url https://security.archlinux.org/ASA-201610-3
7
reference_url https://security.archlinux.org/ASA-201610-7
reference_id ASA-201610-7
reference_type
scores
url https://security.archlinux.org/ASA-201610-7
8
reference_url https://security.archlinux.org/AVG-10
reference_id AVG-10
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-10
9
reference_url https://security.archlinux.org/AVG-11
reference_id AVG-11
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-11
10
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2016-4476
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qv3p-mcnx-gfh9
34
url VCID-s7gm-17ms-53fd
vulnerability_id VCID-s7gm-17ms-53fd
summary The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4146.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4146.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4146
reference_id
reference_type
scores
0
value 0.01312
scoring_system epss
scoring_elements 0.80156
published_at 2026-06-04T12:55:00Z
1
value 0.01312
scoring_system epss
scoring_elements 0.80182
published_at 2026-06-05T12:55:00Z
2
value 0.01312
scoring_system epss
scoring_elements 0.80186
published_at 2026-06-06T12:55:00Z
3
value 0.01312
scoring_system epss
scoring_elements 0.80181
published_at 2026-06-07T12:55:00Z
4
value 0.01312
scoring_system epss
scoring_elements 0.80173
published_at 2026-06-08T12:55:00Z
5
value 0.01312
scoring_system epss
scoring_elements 0.80194
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4146
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4146
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s7gm-17ms-53fd
35
url VCID-s91q-7xur-gudp
vulnerability_id VCID-s91q-7xur-gudp
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13087.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13087.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13087
reference_id
reference_type
scores
0
value 0.00457
scoring_system epss
scoring_elements 0.64321
published_at 2026-06-09T12:55:00Z
1
value 0.00457
scoring_system epss
scoring_elements 0.6427
published_at 2026-06-04T12:55:00Z
2
value 0.00457
scoring_system epss
scoring_elements 0.64312
published_at 2026-06-07T12:55:00Z
3
value 0.00457
scoring_system epss
scoring_elements 0.64323
published_at 2026-06-06T12:55:00Z
4
value 0.00457
scoring_system epss
scoring_elements 0.64301
published_at 2026-06-08T12:55:00Z
5
value 0.00457
scoring_system epss
scoring_elements 0.64314
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13087
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500303
reference_id 1500303
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500303
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13087
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s91q-7xur-gudp
36
url VCID-sz7g-jw53-yyf1
vulnerability_id VCID-sz7g-jw53-yyf1
summary The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9497.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-9497
reference_id
reference_type
scores
0
value 0.11468
scoring_system epss
scoring_elements 0.93741
published_at 2026-06-04T12:55:00Z
1
value 0.11468
scoring_system epss
scoring_elements 0.9375
published_at 2026-06-06T12:55:00Z
2
value 0.11468
scoring_system epss
scoring_elements 0.93755
published_at 2026-06-09T12:55:00Z
3
value 0.11468
scoring_system epss
scoring_elements 0.93749
published_at 2026-06-07T12:55:00Z
4
value 0.11468
scoring_system epss
scoring_elements 0.93748
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-9497
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1699164
reference_id 1699164
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1699164
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
reference_id 926801
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
9
reference_url https://usn.ubuntu.com/3944-1/
reference_id USN-3944-1
reference_type
scores
url https://usn.ubuntu.com/3944-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-9497
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sz7g-jw53-yyf1
37
url VCID-up8e-3hxu-73ah
vulnerability_id VCID-up8e-3hxu-73ah
summary wpa_supplicant: wpa_supplicant loading arbitrary shared objects allowing privilege escalation
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5290.json
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5290.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-5290
reference_id
reference_type
scores
0
value 0.00306
scoring_system epss
scoring_elements 0.54156
published_at 2026-06-09T12:55:00Z
1
value 0.00306
scoring_system epss
scoring_elements 0.54159
published_at 2026-06-05T12:55:00Z
2
value 0.00306
scoring_system epss
scoring_elements 0.54167
published_at 2026-06-06T12:55:00Z
3
value 0.00306
scoring_system epss
scoring_elements 0.54157
published_at 2026-06-07T12:55:00Z
4
value 0.00306
scoring_system epss
scoring_elements 0.54134
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-5290
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5290
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5290
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613
reference_id 2067613
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-18T15:37:32Z/
url https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2303402
reference_id 2303402
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2303402
6
reference_url https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/
reference_id abusing-ubuntu-root-privilege-escalation
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-18T15:37:32Z/
url https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/
7
reference_url https://ubuntu.com/security/notices/USN-6945-1
reference_id USN-6945-1
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-09-18T15:37:32Z/
url https://ubuntu.com/security/notices/USN-6945-1
8
reference_url https://usn.ubuntu.com/6945-1/
reference_id USN-6945-1
reference_type
scores
url https://usn.ubuntu.com/6945-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2024-5290
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-up8e-3hxu-73ah
38
url VCID-uyg6-fyc7-fqf5
vulnerability_id VCID-uyg6-fyc7-fqf5
summary Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1863.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1863.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-1863
reference_id
reference_type
scores
0
value 0.08546
scoring_system epss
scoring_elements 0.92547
published_at 2026-06-06T12:55:00Z
1
value 0.08546
scoring_system epss
scoring_elements 0.9256
published_at 2026-06-09T12:55:00Z
2
value 0.08546
scoring_system epss
scoring_elements 0.92551
published_at 2026-06-05T12:55:00Z
3
value 0.08546
scoring_system epss
scoring_elements 0.92538
published_at 2026-06-04T12:55:00Z
4
value 0.08546
scoring_system epss
scoring_elements 0.92542
published_at 2026-06-07T12:55:00Z
5
value 0.08546
scoring_system epss
scoring_elements 0.92541
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-1863
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1863
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1863
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.2
scoring_system cvssv2
scoring_elements AV:A/AC:H/Au:N/C:N/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1211191
reference_id 1211191
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1211191
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783148
reference_id 783148
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783148
6
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
7
reference_url https://access.redhat.com/errata/RHSA-2015:1090
reference_id RHSA-2015:1090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1090
8
reference_url https://usn.ubuntu.com/2577-1/
reference_id USN-2577-1
reference_type
scores
url https://usn.ubuntu.com/2577-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-1863
risk_score 0.8
exploitability 0.5
weighted_severity 1.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uyg6-fyc7-fqf5
39
url VCID-vgs9-juev-53d2
vulnerability_id VCID-vgs9-juev-53d2
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13088.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13088.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13088
reference_id
reference_type
scores
0
value 0.00457
scoring_system epss
scoring_elements 0.64321
published_at 2026-06-09T12:55:00Z
1
value 0.00457
scoring_system epss
scoring_elements 0.6427
published_at 2026-06-04T12:55:00Z
2
value 0.00457
scoring_system epss
scoring_elements 0.64312
published_at 2026-06-07T12:55:00Z
3
value 0.00457
scoring_system epss
scoring_elements 0.64323
published_at 2026-06-06T12:55:00Z
4
value 0.00457
scoring_system epss
scoring_elements 0.64301
published_at 2026-06-08T12:55:00Z
5
value 0.00457
scoring_system epss
scoring_elements 0.64314
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13088
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500304
reference_id 1500304
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500304
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13088
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vgs9-juev-53d2
40
url VCID-w1t7-99j6-ducn
vulnerability_id VCID-w1t7-99j6-ducn
summary The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9494.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-9494
reference_id
reference_type
scores
0
value 0.01518
scoring_system epss
scoring_elements 0.81562
published_at 2026-06-04T12:55:00Z
1
value 0.01518
scoring_system epss
scoring_elements 0.81591
published_at 2026-06-07T12:55:00Z
2
value 0.01518
scoring_system epss
scoring_elements 0.816
published_at 2026-06-09T12:55:00Z
3
value 0.01518
scoring_system epss
scoring_elements 0.81593
published_at 2026-06-06T12:55:00Z
4
value 0.01518
scoring_system epss
scoring_elements 0.81584
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-9494
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1699141
reference_id 1699141
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1699141
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
reference_id 926801
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926801
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2019-9494
risk_score 3.1
exploitability 0.5
weighted_severity 6.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w1t7-99j6-ducn
41
url VCID-w27s-tf26-t7fb
vulnerability_id VCID-w27s-tf26-t7fb
summary The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12695.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-12695
reference_id
reference_type
scores
0
value 0.03982
scoring_system epss
scoring_elements 0.88612
published_at 2026-06-04T12:55:00Z
1
value 0.03982
scoring_system epss
scoring_elements 0.8863
published_at 2026-06-07T12:55:00Z
2
value 0.03982
scoring_system epss
scoring_elements 0.88646
published_at 2026-06-09T12:55:00Z
3
value 0.03982
scoring_system epss
scoring_elements 0.88631
published_at 2026-06-06T12:55:00Z
4
value 0.03982
scoring_system epss
scoring_elements 0.88629
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-12695
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12695
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28926
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28926
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0326
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27803
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27803
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1846006
reference_id 1846006
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1846006
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976106
reference_id 976106
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976106
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976594
reference_id 976594
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976594
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=983206
reference_id 983206
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=983206
10
reference_url https://security.archlinux.org/ASA-202012-16
reference_id ASA-202012-16
reference_type
scores
url https://security.archlinux.org/ASA-202012-16
11
reference_url https://security.archlinux.org/AVG-1322
reference_id AVG-1322
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1322
12
reference_url https://access.redhat.com/errata/RHSA-2021:1789
reference_id RHSA-2021:1789
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1789
13
reference_url https://usn.ubuntu.com/4494-1/
reference_id USN-4494-1
reference_type
scores
url https://usn.ubuntu.com/4494-1/
14
reference_url https://usn.ubuntu.com/4722-1/
reference_id USN-4722-1
reference_type
scores
url https://usn.ubuntu.com/4722-1/
15
reference_url https://usn.ubuntu.com/4734-1/
reference_id USN-4734-1
reference_type
scores
url https://usn.ubuntu.com/4734-1/
16
reference_url https://usn.ubuntu.com/4734-2/
reference_id USN-4734-2
reference_type
scores
url https://usn.ubuntu.com/4734-2/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
1
url pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
purl pkg:deb/debian/wpa@2:2.9.0-21%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-6jb3-mw38-gqaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.9.0-21%252Bdeb11u2
aliases CVE-2020-12695
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w27s-tf26-t7fb
42
url VCID-yj2a-e823-nyfw
vulnerability_id VCID-yj2a-e823-nyfw
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13079.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13079.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13079
reference_id
reference_type
scores
0
value 0.01012
scoring_system epss
scoring_elements 0.77507
published_at 2026-06-09T12:55:00Z
1
value 0.01012
scoring_system epss
scoring_elements 0.77506
published_at 2026-06-06T12:55:00Z
2
value 0.01012
scoring_system epss
scoring_elements 0.77469
published_at 2026-06-04T12:55:00Z
3
value 0.01012
scoring_system epss
scoring_elements 0.77497
published_at 2026-06-07T12:55:00Z
4
value 0.01012
scoring_system epss
scoring_elements 0.77486
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13079
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491694
reference_id 1491694
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491694
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
1
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13079
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yj2a-e823-nyfw
43
url VCID-yv7z-2x73-xygy
vulnerability_id VCID-yv7z-2x73-xygy
summary hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10743.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10743.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-10743
reference_id
reference_type
scores
0
value 0.0043
scoring_system epss
scoring_elements 0.62879
published_at 2026-06-04T12:55:00Z
1
value 0.0043
scoring_system epss
scoring_elements 0.62921
published_at 2026-06-05T12:55:00Z
2
value 0.0043
scoring_system epss
scoring_elements 0.6293
published_at 2026-06-06T12:55:00Z
3
value 0.0043
scoring_system epss
scoring_elements 0.6292
published_at 2026-06-07T12:55:00Z
4
value 0.0043
scoring_system epss
scoring_elements 0.62906
published_at 2026-06-08T12:55:00Z
5
value 0.0043
scoring_system epss
scoring_elements 0.62922
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-10743
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10743
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10743
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1811037
reference_id 1811037
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1811037
4
reference_url https://usn.ubuntu.com/3944-1/
reference_id USN-3944-1
reference_type
scores
url https://usn.ubuntu.com/3944-1/
fixed_packages
0
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2016-10743
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yv7z-2x73-xygy
Fixing_vulnerabilities
0
url VCID-2u68-nqzd-pqcu
vulnerability_id VCID-2u68-nqzd-pqcu
summary The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5316.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5316.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5316
reference_id
reference_type
scores
0
value 0.01524
scoring_system epss
scoring_elements 0.81597
published_at 2026-06-04T12:55:00Z
1
value 0.01524
scoring_system epss
scoring_elements 0.81627
published_at 2026-06-05T12:55:00Z
2
value 0.01524
scoring_system epss
scoring_elements 0.81628
published_at 2026-06-07T12:55:00Z
3
value 0.01524
scoring_system epss
scoring_elements 0.81622
published_at 2026-06-08T12:55:00Z
4
value 0.01524
scoring_system epss
scoring_elements 0.81636
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5316
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1277865
reference_id 1277865
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1277865
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804710
reference_id 804710
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804710
15
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5316
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2u68-nqzd-pqcu
1
url VCID-7kes-xst7-z3d3
vulnerability_id VCID-7kes-xst7-z3d3
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13086.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13086.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13086
reference_id
reference_type
scores
0
value 0.00463
scoring_system epss
scoring_elements 0.64669
published_at 2026-06-09T12:55:00Z
1
value 0.00463
scoring_system epss
scoring_elements 0.64622
published_at 2026-06-04T12:55:00Z
2
value 0.00463
scoring_system epss
scoring_elements 0.64661
published_at 2026-06-07T12:55:00Z
3
value 0.00463
scoring_system epss
scoring_elements 0.64673
published_at 2026-06-06T12:55:00Z
4
value 0.00463
scoring_system epss
scoring_elements 0.64651
published_at 2026-06-08T12:55:00Z
5
value 0.00463
scoring_system epss
scoring_elements 0.64663
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13086
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500302
reference_id 1500302
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500302
13
reference_url https://security.archlinux.org/AVG-453
reference_id AVG-453
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-453
14
reference_url https://security.archlinux.org/AVG-454
reference_id AVG-454
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-454
15
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
16
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
17
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13086
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7kes-xst7-z3d3
2
url VCID-7q6k-mpk6-t7bv
vulnerability_id VCID-7q6k-mpk6-t7bv
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13082.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13082.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13082
reference_id
reference_type
scores
0
value 0.0043
scoring_system epss
scoring_elements 0.62899
published_at 2026-06-08T12:55:00Z
1
value 0.0043
scoring_system epss
scoring_elements 0.62924
published_at 2026-06-06T12:55:00Z
2
value 0.0043
scoring_system epss
scoring_elements 0.62872
published_at 2026-06-04T12:55:00Z
3
value 0.0043
scoring_system epss
scoring_elements 0.62914
published_at 2026-06-09T12:55:00Z
4
value 0.0043
scoring_system epss
scoring_elements 0.62913
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13082
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491698
reference_id 1491698
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491698
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13082
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7q6k-mpk6-t7bv
3
url VCID-7y9t-7akx-afg7
vulnerability_id VCID-7y9t-7akx-afg7
summary The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4141.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4141.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4141
reference_id
reference_type
scores
0
value 0.01465
scoring_system epss
scoring_elements 0.81221
published_at 2026-06-04T12:55:00Z
1
value 0.01465
scoring_system epss
scoring_elements 0.81249
published_at 2026-06-05T12:55:00Z
2
value 0.01465
scoring_system epss
scoring_elements 0.81251
published_at 2026-06-06T12:55:00Z
3
value 0.01465
scoring_system epss
scoring_elements 0.81248
published_at 2026-06-07T12:55:00Z
4
value 0.01465
scoring_system epss
scoring_elements 0.81244
published_at 2026-06-08T12:55:00Z
5
value 0.01465
scoring_system epss
scoring_elements 0.81261
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4141
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1221172
reference_id 1221172
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1221172
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787372
reference_id 787372
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787372
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4141
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7y9t-7akx-afg7
4
url VCID-84gv-j3vy-kbhp
vulnerability_id VCID-84gv-j3vy-kbhp
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13081.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13081.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13081
reference_id
reference_type
scores
0
value 0.0111
scoring_system epss
scoring_elements 0.78511
published_at 2026-06-09T12:55:00Z
1
value 0.0111
scoring_system epss
scoring_elements 0.78482
published_at 2026-06-04T12:55:00Z
2
value 0.0111
scoring_system epss
scoring_elements 0.78506
published_at 2026-06-07T12:55:00Z
3
value 0.0111
scoring_system epss
scoring_elements 0.78517
published_at 2026-06-06T12:55:00Z
4
value 0.0111
scoring_system epss
scoring_elements 0.78493
published_at 2026-06-08T12:55:00Z
5
value 0.0111
scoring_system epss
scoring_elements 0.78508
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13081
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491697
reference_id 1491697
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491697
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
19
reference_url https://usn.ubuntu.com/3505-1/
reference_id USN-3505-1
reference_type
scores
url https://usn.ubuntu.com/3505-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13081
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-84gv-j3vy-kbhp
5
url VCID-8d56-3k4a-c7hy
vulnerability_id VCID-8d56-3k4a-c7hy
summary The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5314
reference_id
reference_type
scores
0
value 0.0115
scoring_system epss
scoring_elements 0.78829
published_at 2026-06-04T12:55:00Z
1
value 0.0115
scoring_system epss
scoring_elements 0.78855
published_at 2026-06-05T12:55:00Z
2
value 0.0115
scoring_system epss
scoring_elements 0.78862
published_at 2026-06-06T12:55:00Z
3
value 0.0115
scoring_system epss
scoring_elements 0.78853
published_at 2026-06-07T12:55:00Z
4
value 0.0115
scoring_system epss
scoring_elements 0.78842
published_at 2026-06-08T12:55:00Z
5
value 0.0115
scoring_system epss
scoring_elements 0.78859
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5314
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
reference_id 804708
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
13
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5314
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8d56-3k4a-c7hy
6
url VCID-b8k9-3pnn-ekgs
vulnerability_id VCID-b8k9-3pnn-ekgs
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13078.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13078.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13078
reference_id
reference_type
scores
0
value 0.00813
scoring_system epss
scoring_elements 0.74655
published_at 2026-06-09T12:55:00Z
1
value 0.00813
scoring_system epss
scoring_elements 0.74621
published_at 2026-06-04T12:55:00Z
2
value 0.00813
scoring_system epss
scoring_elements 0.74646
published_at 2026-06-07T12:55:00Z
3
value 0.00813
scoring_system epss
scoring_elements 0.74658
published_at 2026-06-06T12:55:00Z
4
value 0.00813
scoring_system epss
scoring_elements 0.74629
published_at 2026-06-08T12:55:00Z
5
value 0.00813
scoring_system epss
scoring_elements 0.74653
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13078
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491693
reference_id 1491693
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491693
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13078
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b8k9-3pnn-ekgs
7
url VCID-bugv-6pzr-tuhy
vulnerability_id VCID-bugv-6pzr-tuhy
summary Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8041.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8041.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8041
reference_id
reference_type
scores
0
value 0.0158
scoring_system epss
scoring_elements 0.81912
published_at 2026-06-04T12:55:00Z
1
value 0.0158
scoring_system epss
scoring_elements 0.81946
published_at 2026-06-05T12:55:00Z
2
value 0.0158
scoring_system epss
scoring_elements 0.81947
published_at 2026-06-06T12:55:00Z
3
value 0.0158
scoring_system epss
scoring_elements 0.81948
published_at 2026-06-07T12:55:00Z
4
value 0.0158
scoring_system epss
scoring_elements 0.81941
published_at 2026-06-08T12:55:00Z
5
value 0.0158
scoring_system epss
scoring_elements 0.81956
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8041
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1241905
reference_id 1241905
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1241905
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795740
reference_id 795740
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795740
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-8041
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bugv-6pzr-tuhy
8
url VCID-c1uc-msuh-bbgq
vulnerability_id VCID-c1uc-msuh-bbgq
summary The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service (memory leak) via a crafted message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4145.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4145.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4145
reference_id
reference_type
scores
0
value 0.01205
scoring_system epss
scoring_elements 0.79284
published_at 2026-06-04T12:55:00Z
1
value 0.01205
scoring_system epss
scoring_elements 0.7931
published_at 2026-06-05T12:55:00Z
2
value 0.01205
scoring_system epss
scoring_elements 0.79315
published_at 2026-06-09T12:55:00Z
3
value 0.01205
scoring_system epss
scoring_elements 0.79308
published_at 2026-06-07T12:55:00Z
4
value 0.01205
scoring_system epss
scoring_elements 0.79297
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4145
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4145
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c1uc-msuh-bbgq
9
url VCID-edpz-qhd8-jfez
vulnerability_id VCID-edpz-qhd8-jfez
summary The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5315.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5315.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5315
reference_id
reference_type
scores
0
value 0.0115
scoring_system epss
scoring_elements 0.78829
published_at 2026-06-04T12:55:00Z
1
value 0.0115
scoring_system epss
scoring_elements 0.78855
published_at 2026-06-05T12:55:00Z
2
value 0.0115
scoring_system epss
scoring_elements 0.78862
published_at 2026-06-06T12:55:00Z
3
value 0.0115
scoring_system epss
scoring_elements 0.78853
published_at 2026-06-07T12:55:00Z
4
value 0.0115
scoring_system epss
scoring_elements 0.78842
published_at 2026-06-08T12:55:00Z
5
value 0.0115
scoring_system epss
scoring_elements 0.78859
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5315
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1278377
reference_id 1278377
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1278377
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
reference_id 804708
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804708
15
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5315
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-edpz-qhd8-jfez
10
url VCID-fwsj-n5rh-53h1
vulnerability_id VCID-fwsj-n5rh-53h1
summary Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4142.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4142.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4142
reference_id
reference_type
scores
0
value 0.07071
scoring_system epss
scoring_elements 0.91661
published_at 2026-06-04T12:55:00Z
1
value 0.07071
scoring_system epss
scoring_elements 0.91673
published_at 2026-06-05T12:55:00Z
2
value 0.07071
scoring_system epss
scoring_elements 0.91675
published_at 2026-06-06T12:55:00Z
3
value 0.07071
scoring_system epss
scoring_elements 0.91672
published_at 2026-06-07T12:55:00Z
4
value 0.07071
scoring_system epss
scoring_elements 0.91671
published_at 2026-06-08T12:55:00Z
5
value 0.07071
scoring_system epss
scoring_elements 0.91685
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4142
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1221178
reference_id 1221178
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1221178
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787373
reference_id 787373
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787373
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://access.redhat.com/errata/RHSA-2015:1090
reference_id RHSA-2015:1090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1090
17
reference_url https://access.redhat.com/errata/RHSA-2015:1439
reference_id RHSA-2015:1439
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1439
18
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4142
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fwsj-n5rh-53h1
11
url VCID-hxn4-6y6j-83cz
vulnerability_id VCID-hxn4-6y6j-83cz
summary The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5310.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5310.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5310
reference_id
reference_type
scores
0
value 0.00304
scoring_system epss
scoring_elements 0.53929
published_at 2026-06-04T12:55:00Z
1
value 0.00304
scoring_system epss
scoring_elements 0.53987
published_at 2026-06-05T12:55:00Z
2
value 0.00304
scoring_system epss
scoring_elements 0.53994
published_at 2026-06-06T12:55:00Z
3
value 0.00304
scoring_system epss
scoring_elements 0.53983
published_at 2026-06-09T12:55:00Z
4
value 0.00304
scoring_system epss
scoring_elements 0.5396
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5310
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1277857
reference_id 1277857
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1277857
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804707
reference_id 804707
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804707
15
reference_url https://usn.ubuntu.com/2808-1/
reference_id USN-2808-1
reference_type
scores
url https://usn.ubuntu.com/2808-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-5310
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hxn4-6y6j-83cz
12
url VCID-kyvg-q58s-cfff
vulnerability_id VCID-kyvg-q58s-cfff
summary The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service (crash) via a crafted message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4144.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4144.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4144
reference_id
reference_type
scores
0
value 0.01205
scoring_system epss
scoring_elements 0.79284
published_at 2026-06-04T12:55:00Z
1
value 0.01205
scoring_system epss
scoring_elements 0.7931
published_at 2026-06-05T12:55:00Z
2
value 0.01205
scoring_system epss
scoring_elements 0.79315
published_at 2026-06-09T12:55:00Z
3
value 0.01205
scoring_system epss
scoring_elements 0.79308
published_at 2026-06-07T12:55:00Z
4
value 0.01205
scoring_system epss
scoring_elements 0.79297
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4144
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4144
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kyvg-q58s-cfff
13
url VCID-mwc1-rpqz-uqcj
vulnerability_id VCID-mwc1-rpqz-uqcj
summary The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4143.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4143.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4143
reference_id
reference_type
scores
0
value 0.01205
scoring_system epss
scoring_elements 0.79284
published_at 2026-06-04T12:55:00Z
1
value 0.01205
scoring_system epss
scoring_elements 0.7931
published_at 2026-06-05T12:55:00Z
2
value 0.01205
scoring_system epss
scoring_elements 0.79315
published_at 2026-06-09T12:55:00Z
3
value 0.01205
scoring_system epss
scoring_elements 0.79308
published_at 2026-06-07T12:55:00Z
4
value 0.01205
scoring_system epss
scoring_elements 0.79297
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4143
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4143
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mwc1-rpqz-uqcj
14
url VCID-n7rh-f4mj-jbdq
vulnerability_id VCID-n7rh-f4mj-jbdq
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13080.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13080.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13080
reference_id
reference_type
scores
0
value 0.00948
scoring_system epss
scoring_elements 0.76718
published_at 2026-06-08T12:55:00Z
1
value 0.00948
scoring_system epss
scoring_elements 0.7674
published_at 2026-06-09T12:55:00Z
2
value 0.00948
scoring_system epss
scoring_elements 0.76704
published_at 2026-06-04T12:55:00Z
3
value 0.00948
scoring_system epss
scoring_elements 0.76734
published_at 2026-06-05T12:55:00Z
4
value 0.00948
scoring_system epss
scoring_elements 0.76729
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13080
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491696
reference_id 1491696
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491696
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
21
reference_url https://usn.ubuntu.com/3505-1/
reference_id USN-3505-1
reference_type
scores
url https://usn.ubuntu.com/3505-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13080
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n7rh-f4mj-jbdq
15
url VCID-p6m7-m2w8-uybh
vulnerability_id VCID-p6m7-m2w8-uybh
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13077.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13077.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13077
reference_id
reference_type
scores
0
value 0.00661
scoring_system epss
scoring_elements 0.71554
published_at 2026-06-09T12:55:00Z
1
value 0.00661
scoring_system epss
scoring_elements 0.71521
published_at 2026-06-04T12:55:00Z
2
value 0.00661
scoring_system epss
scoring_elements 0.71547
published_at 2026-06-07T12:55:00Z
3
value 0.00661
scoring_system epss
scoring_elements 0.71571
published_at 2026-06-06T12:55:00Z
4
value 0.00661
scoring_system epss
scoring_elements 0.71532
published_at 2026-06-08T12:55:00Z
5
value 0.00661
scoring_system epss
scoring_elements 0.71565
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13077
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491692
reference_id 1491692
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491692
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13077
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p6m7-m2w8-uybh
16
url VCID-s7gm-17ms-53fd
vulnerability_id VCID-s7gm-17ms-53fd
summary The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4146.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4146.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-4146
reference_id
reference_type
scores
0
value 0.01312
scoring_system epss
scoring_elements 0.80156
published_at 2026-06-04T12:55:00Z
1
value 0.01312
scoring_system epss
scoring_elements 0.80182
published_at 2026-06-05T12:55:00Z
2
value 0.01312
scoring_system epss
scoring_elements 0.80186
published_at 2026-06-06T12:55:00Z
3
value 0.01312
scoring_system epss
scoring_elements 0.80181
published_at 2026-06-07T12:55:00Z
4
value 0.01312
scoring_system epss
scoring_elements 0.80173
published_at 2026-06-08T12:55:00Z
5
value 0.01312
scoring_system epss
scoring_elements 0.80194
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-4146
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4141
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4142
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4143
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4144
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4145
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4146
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5310
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5314
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5315
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5316
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8041
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
reference_id 1219449
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1219449
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
reference_id 787371
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787371
15
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
16
reference_url https://usn.ubuntu.com/2650-1/
reference_id USN-2650-1
reference_type
scores
url https://usn.ubuntu.com/2650-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-4146
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s7gm-17ms-53fd
17
url VCID-s91q-7xur-gudp
vulnerability_id VCID-s91q-7xur-gudp
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13087.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13087.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13087
reference_id
reference_type
scores
0
value 0.00457
scoring_system epss
scoring_elements 0.64321
published_at 2026-06-09T12:55:00Z
1
value 0.00457
scoring_system epss
scoring_elements 0.6427
published_at 2026-06-04T12:55:00Z
2
value 0.00457
scoring_system epss
scoring_elements 0.64312
published_at 2026-06-07T12:55:00Z
3
value 0.00457
scoring_system epss
scoring_elements 0.64323
published_at 2026-06-06T12:55:00Z
4
value 0.00457
scoring_system epss
scoring_elements 0.64301
published_at 2026-06-08T12:55:00Z
5
value 0.00457
scoring_system epss
scoring_elements 0.64314
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13087
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500303
reference_id 1500303
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500303
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://access.redhat.com/errata/RHSA-2017:2911
reference_id RHSA-2017:2911
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2911
20
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13087
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s91q-7xur-gudp
18
url VCID-uyg6-fyc7-fqf5
vulnerability_id VCID-uyg6-fyc7-fqf5
summary Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1863.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1863.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-1863
reference_id
reference_type
scores
0
value 0.08546
scoring_system epss
scoring_elements 0.92547
published_at 2026-06-06T12:55:00Z
1
value 0.08546
scoring_system epss
scoring_elements 0.9256
published_at 2026-06-09T12:55:00Z
2
value 0.08546
scoring_system epss
scoring_elements 0.92551
published_at 2026-06-05T12:55:00Z
3
value 0.08546
scoring_system epss
scoring_elements 0.92538
published_at 2026-06-04T12:55:00Z
4
value 0.08546
scoring_system epss
scoring_elements 0.92542
published_at 2026-06-07T12:55:00Z
5
value 0.08546
scoring_system epss
scoring_elements 0.92541
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-1863
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1863
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1863
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.2
scoring_system cvssv2
scoring_elements AV:A/AC:H/Au:N/C:N/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1211191
reference_id 1211191
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1211191
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783148
reference_id 783148
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783148
6
reference_url https://security.gentoo.org/glsa/201606-17
reference_id GLSA-201606-17
reference_type
scores
url https://security.gentoo.org/glsa/201606-17
7
reference_url https://access.redhat.com/errata/RHSA-2015:1090
reference_id RHSA-2015:1090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1090
8
reference_url https://usn.ubuntu.com/2577-1/
reference_id USN-2577-1
reference_type
scores
url https://usn.ubuntu.com/2577-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
aliases CVE-2015-1863
risk_score 0.8
exploitability 0.5
weighted_severity 1.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uyg6-fyc7-fqf5
19
url VCID-vgs9-juev-53d2
vulnerability_id VCID-vgs9-juev-53d2
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13088.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13088.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13088
reference_id
reference_type
scores
0
value 0.00457
scoring_system epss
scoring_elements 0.64321
published_at 2026-06-09T12:55:00Z
1
value 0.00457
scoring_system epss
scoring_elements 0.6427
published_at 2026-06-04T12:55:00Z
2
value 0.00457
scoring_system epss
scoring_elements 0.64312
published_at 2026-06-07T12:55:00Z
3
value 0.00457
scoring_system epss
scoring_elements 0.64323
published_at 2026-06-06T12:55:00Z
4
value 0.00457
scoring_system epss
scoring_elements 0.64301
published_at 2026-06-08T12:55:00Z
5
value 0.00457
scoring_system epss
scoring_elements 0.64314
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13088
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500304
reference_id 1500304
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500304
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://access.redhat.com/errata/RHSA-2017:2907
reference_id RHSA-2017:2907
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2907
19
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13088
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vgs9-juev-53d2
20
url VCID-yj2a-e823-nyfw
vulnerability_id VCID-yj2a-e823-nyfw
summary man-in-the-middle
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13079.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-13079.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-13079
reference_id
reference_type
scores
0
value 0.01012
scoring_system epss
scoring_elements 0.77507
published_at 2026-06-09T12:55:00Z
1
value 0.01012
scoring_system epss
scoring_elements 0.77506
published_at 2026-06-06T12:55:00Z
2
value 0.01012
scoring_system epss
scoring_elements 0.77469
published_at 2026-06-04T12:55:00Z
3
value 0.01012
scoring_system epss
scoring_elements 0.77497
published_at 2026-06-07T12:55:00Z
4
value 0.01012
scoring_system epss
scoring_elements 0.77486
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-13079
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13077
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13078
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13079
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13080
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13081
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13082
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13086
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13087
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
11
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv2
scoring_elements AV:A/AC:L/Au:N/C:C/I:C/A:N
1
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1491694
reference_id 1491694
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1491694
13
reference_url https://security.archlinux.org/ASA-201710-22
reference_id ASA-201710-22
reference_type
scores
url https://security.archlinux.org/ASA-201710-22
14
reference_url https://security.archlinux.org/ASA-201710-23
reference_id ASA-201710-23
reference_type
scores
url https://security.archlinux.org/ASA-201710-23
15
reference_url https://security.archlinux.org/AVG-447
reference_id AVG-447
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-447
16
reference_url https://security.archlinux.org/AVG-448
reference_id AVG-448
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-448
17
reference_url https://security.gentoo.org/glsa/201711-03
reference_id GLSA-201711-03
reference_type
scores
url https://security.gentoo.org/glsa/201711-03
18
reference_url https://usn.ubuntu.com/3455-1/
reference_id USN-3455-1
reference_type
scores
url https://usn.ubuntu.com/3455-1/
fixed_packages
0
url pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
purl pkg:deb/debian/wpa@2.3-1%2Bdeb8u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-2u68-nqzd-pqcu
4
vulnerability VCID-57qp-9n3e-g7g7
5
vulnerability VCID-5uqd-9srx-buhb
6
vulnerability VCID-64pb-r9pk-3bfk
7
vulnerability VCID-6jb3-mw38-gqaf
8
vulnerability VCID-7fuh-9z2r-ekee
9
vulnerability VCID-7kes-xst7-z3d3
10
vulnerability VCID-7q6k-mpk6-t7bv
11
vulnerability VCID-7y9t-7akx-afg7
12
vulnerability VCID-84gv-j3vy-kbhp
13
vulnerability VCID-8d56-3k4a-c7hy
14
vulnerability VCID-awmy-cpam-xqah
15
vulnerability VCID-b8k9-3pnn-ekgs
16
vulnerability VCID-bugv-6pzr-tuhy
17
vulnerability VCID-c1uc-msuh-bbgq
18
vulnerability VCID-c6rb-kwrq-uubn
19
vulnerability VCID-cmpu-sjnc-qyc9
20
vulnerability VCID-d17v-v7yt-5kb3
21
vulnerability VCID-dc5z-thyu-sqhb
22
vulnerability VCID-dvkq-285n-9kaw
23
vulnerability VCID-edpz-qhd8-jfez
24
vulnerability VCID-fwsj-n5rh-53h1
25
vulnerability VCID-hxn4-6y6j-83cz
26
vulnerability VCID-kj7b-sur9-hfhb
27
vulnerability VCID-kyvg-q58s-cfff
28
vulnerability VCID-m6c2-crap-b3b7
29
vulnerability VCID-mwc1-rpqz-uqcj
30
vulnerability VCID-n7rh-f4mj-jbdq
31
vulnerability VCID-p4b2-1g26-nkd2
32
vulnerability VCID-p6m7-m2w8-uybh
33
vulnerability VCID-qv3p-mcnx-gfh9
34
vulnerability VCID-s7gm-17ms-53fd
35
vulnerability VCID-s91q-7xur-gudp
36
vulnerability VCID-sz7g-jw53-yyf1
37
vulnerability VCID-up8e-3hxu-73ah
38
vulnerability VCID-uyg6-fyc7-fqf5
39
vulnerability VCID-vgs9-juev-53d2
40
vulnerability VCID-w1t7-99j6-ducn
41
vulnerability VCID-w27s-tf26-t7fb
42
vulnerability VCID-yj2a-e823-nyfw
43
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5
1
url pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
purl pkg:deb/debian/wpa@2:2.4-1%2Bdeb9u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ba4-zp3t-j7b7
1
vulnerability VCID-1eva-m1zn-dbbs
2
vulnerability VCID-2pae-t1zg-d7dy
3
vulnerability VCID-57qp-9n3e-g7g7
4
vulnerability VCID-5uqd-9srx-buhb
5
vulnerability VCID-64pb-r9pk-3bfk
6
vulnerability VCID-6jb3-mw38-gqaf
7
vulnerability VCID-7fuh-9z2r-ekee
8
vulnerability VCID-7kes-xst7-z3d3
9
vulnerability VCID-7q6k-mpk6-t7bv
10
vulnerability VCID-84gv-j3vy-kbhp
11
vulnerability VCID-awmy-cpam-xqah
12
vulnerability VCID-b8k9-3pnn-ekgs
13
vulnerability VCID-c6rb-kwrq-uubn
14
vulnerability VCID-cmpu-sjnc-qyc9
15
vulnerability VCID-d17v-v7yt-5kb3
16
vulnerability VCID-dc5z-thyu-sqhb
17
vulnerability VCID-kj7b-sur9-hfhb
18
vulnerability VCID-m6c2-crap-b3b7
19
vulnerability VCID-n7rh-f4mj-jbdq
20
vulnerability VCID-p4b2-1g26-nkd2
21
vulnerability VCID-p6m7-m2w8-uybh
22
vulnerability VCID-s91q-7xur-gudp
23
vulnerability VCID-sz7g-jw53-yyf1
24
vulnerability VCID-up8e-3hxu-73ah
25
vulnerability VCID-vgs9-juev-53d2
26
vulnerability VCID-w1t7-99j6-ducn
27
vulnerability VCID-w27s-tf26-t7fb
28
vulnerability VCID-yj2a-e823-nyfw
29
vulnerability VCID-yv7z-2x73-xygy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.4-1%252Bdeb9u6
2
url pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
purl pkg:deb/debian/wpa@2:2.7%2Bgit20190128%2B0c1e29f-6%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1eva-m1zn-dbbs
1
vulnerability VCID-57qp-9n3e-g7g7
2
vulnerability VCID-5uqd-9srx-buhb
3
vulnerability VCID-64pb-r9pk-3bfk
4
vulnerability VCID-6jb3-mw38-gqaf
5
vulnerability VCID-7fuh-9z2r-ekee
6
vulnerability VCID-c6rb-kwrq-uubn
7
vulnerability VCID-kj7b-sur9-hfhb
8
vulnerability VCID-p4b2-1g26-nkd2
9
vulnerability VCID-up8e-3hxu-73ah
10
vulnerability VCID-w27s-tf26-t7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2:2.7%252Bgit20190128%252B0c1e29f-6%252Bdeb10u3
aliases CVE-2017-13079
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yj2a-e823-nyfw
Risk_score4.4
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/wpa@2.3-1%252Bdeb8u5