Skip to content
OpenAdvisories
Unscored USN-2383-1 1 CVE

wpa, wpasupplicant vulnerability

Published Oct 14, 2014 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Jouni Malinen discovered that the wpa_cli tool incorrectly sanitized
strings when being used with action scripts. A remote attacker could
possibly use this issue to execute arbitrary commands.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS wpa 2.1-0ubuntu1.1

Vulnerabilities 1

  • Unscored —
    CVE-2014-3686

    wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli…

    wpa wpa Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-3686