CVE-2015-1863
Fixed in a distro release EPSS 5%
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
Products: canonical ubuntu_linux, w1.fi wpa_supplicant, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, debian_linux, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wpa | 2.3-2 |
| Debian 13 | wpa | 2.3-2 |
| Debian 14 | wpa | 2.3-2 |
| Debian 7 | wpa | 1.0-3+deb7u2 |
| Debian 8 | wpa | 2.3-1+deb8u1 |
| Red Hat Enterprise Linux 7 | wpa_supplicant | 1:2.0-17.ael7b_1 |
| Red Hat Enterprise Linux 7 | wpa_supplicant | 1:2.0-17.el7_1 |
| Red Hat Enterprise Linux 7 | wpa_supplicant-debuginfo | 1:2.0-17.el7_1 |
| Red Hat Enterprise Linux 7 | wpa_supplicant-debuginfo | 1:2.0-17.ael7b_1 |
| SUSE Linux Enterprise Desktop 12 | wpa_supplicant | 2.2-8.1 |
| SUSE Linux Enterprise Server 12 | wpa_supplicant | 2.2-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | wpa_supplicant | 2.2-8.1 |
| Ubuntu 14.04 LTS | wpa | 2.1-0ubuntu1.2 |
| openSUSE Tumbleweed | hostapd | 2.6-1.1 |
| openSUSE Tumbleweed | wpa_supplicant | 2.6-1.1 |