Skip to content
OpenAdvisories
Unscored RHSA-2015:1090 2 CVEs

Red Hat Security Advisory: wpa_supplicant security and enhancement update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client wpa_supplicant 1:2.0-17.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client wpa_supplicant-debuginfo 1:2.0-17.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode wpa_supplicant 1:2.0-17.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode wpa_supplicant-debuginfo 1:2.0-17.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server wpa_supplicant 1:2.0-17.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server wpa_supplicant-debuginfo 1:2.0-17.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::workstation wpa_supplicant 1:2.0-17.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation wpa_supplicant-debuginfo 1:2.0-17.el7_1

Vulnerabilities 2

  • Unscored —
    CVE-2015-1863

    Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (cras…

    wpa wpa Debian Ubuntu
  • Unscored —
    CVE-2015-4142

    Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, whe…

    wpa wpa Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1178263
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211191
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1221178
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1090.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-1863
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1863
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1863
  • article
    http://w1.fi/security/2015-1/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4142
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4142
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4142
  • article
    http://w1.fi/security/2015-3/integer-underflow-in-ap-mode-wmm-action-frame.txt