CVE-2005-0470

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-03-14 · updated 2026-06-16

Description

Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data.

Affected products

gentoo Linux: all versions
Suse Linux: 9.2
Wpa Supplicant: 0.2, 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5 (+1)

References

http://lists.shmoo.com/pipermail/hostap/2005-February/009465.html
http://secunia.com/advisories/14313
http://securitytracker.com/id?1013226
http://www.gentoo.org/security/en/glsa/glsa-200502-22.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/19357
http://lists.shmoo.com/pipermail/hostap/2005-February/009465.html
http://secunia.com/advisories/14313
http://securitytracker.com/id?1013226
http://www.gentoo.org/security/en/glsa/glsa-200502-22.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/19357

Get alerted when CVE-2005-0470 or the next vulnerability affects your stack