Red Hat Security AdvisoryRHSA-2015:1090
wpa_supplicant security and enhancement update
Released 2015-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) wpa_supplicant-1:2.0-17.el7_1
- Red Hat Enterprise Linux ComputeNode (v. 7) wpa_supplicant-1:2.0-17.el7_1
- Red Hat Enterprise Linux Server (v. 7) wpa_supplicant-1:2.0-17.ael7b_1, wpa_supplicant-1:2.0-17.el7_1
- Red Hat Enterprise Linux Workstation (v. 7) wpa_supplicant-1:2.0-17.el7_1
Fixes 2 records
Priority LOW 34
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management fram…
CVSS 2.0MEDIUM 5.8· Adjacent network · No auth · Interaction — · EPSS 0.05191 · Published 2015-04-28 · Fixed CWE-119
Priority LOW 27
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (cras…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04005 · Published 2015-06-15 · Fixed CWE-119
