Skip to content
OpenAdvisories
High ELSA-2015-1090 2 CVEs

Important: wpa_supplicant security and enhancement update (Oracle Linux 7)

Published Jun 11, 2015 · Updated Jun 11, 2015

Summary

[1:2.0-17]
- AP WMM: Fix integer underflow in WMM Action frame parser (rh #1221178) (rh #1222015)

[1:2.0-16]
- P2P: Validate SSID element length before copying it (CVE-2015-1863)

[1:2.0-15]
- Add domain_match config option from upstream (rh #1178263)
- Include peer certificate in EAP events for use by clients

[1:2.0-14]
- Use os_exec() for action script execution (CVE-2014-3686)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 wpa_supplicant 1:2.0-17.el7_1

Vulnerabilities 2

  • Unscored —

    Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (cras…

  • Unscored —

    Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, whe…