Skip to content
OpenAdvisories
Unscored USN-2808-1 3 CVEs

wpa vulnerabilities

Published Nov 10, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that wpa_supplicant incorrectly handled WMM Sleep Mode
Response frame processing. A remote attacker could use this issue to
perform broadcast/multicast packet injections, or cause a denial of
service. (CVE-2015-5310)

It was discovered that wpa_supplicant and hostapd incorrectly handled
certain EAP-pwd messages. A remote attacker could use this issue to cause a
denial of service. (CVE-2015-5314, CVE-2015-5315)

It was discovered that wpa_supplicant incorrectly handled certain EAP-pwd
Confirm messages. A remote attacker could use this issue to cause a
denial of service. This issue only applied to Ubuntu 15.10. (CVE-2015-5316)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS wpa 2.1-0ubuntu1.4

Vulnerabilities 3

  • Unscored —
    CVE-2015-5310

    The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when mana…

    wpa wpa Debian Ubuntu
  • Unscored —
    CVE-2015-5314

    The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reasse…

    wpa wpa Debian Ubuntu
  • Unscored —
    CVE-2015-5315

    The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassemb…

    wpa wpa Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-5310
  • report
    https://ubuntu.com/security/CVE-2015-5314
  • report
    https://ubuntu.com/security/CVE-2015-5315
  • report
    https://ubuntu.com/security/CVE-2015-5316