CVE-2015-0210
Fixed in a distro release EPSS <1%
wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.
Products: w1.fi wpa_supplicant
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 12 | wpa_supplicant | 2.2-8.1 |
| SUSE Linux Enterprise Server 11 SP4 | wpa_supplicant | 0.7.1-6.18.6.1 |
| SUSE Linux Enterprise Server 12 | wpa_supplicant | 2.2-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | wpa_supplicant | 0.7.1-6.18.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | wpa_supplicant | 2.2-8.1 |