CVE-2015-1863

Published: Apr 28, 2015Modified: May 6, 2026

5.8

Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 6.5 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.

Affected (20)

Products: Canonical: Ubuntu Linux · W1.fi: Wpa Supplicant · Redhat: Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Hpc Node Eus, Enterprise Linux Server, Enterprise Linux Server Eus, Enterprise Linux Workstation · +2 more

Show all products

Canonical: Ubuntu Linux · W1.fi: Wpa Supplicant · Redhat: Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Hpc Node Eus, Enterprise Linux Server, Enterprise Linux Server Eus, Enterprise Linux Workstation · Debian: Debian Linux · Opensuse: Opensuse

1 product

1 product

6 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Hpc Node Eus

Enterprise Linux Server

Enterprise Linux Server Eus

Enterprise Linux Workstation

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Canonical Ubuntu Linux	Version 15.04

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
W1.fi Wpa Supplicant	Version 1.0
W1.fi Wpa Supplicant	Version 1.1
W1.fi Wpa Supplicant	Version 2.0
W1.fi Wpa Supplicant	Version 2.1
W1.fi Wpa Supplicant	Version 2.2
W1.fi Wpa Supplicant	Version 2.3
W1.fi Wpa Supplicant	Version 2.4

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Hpc Node Eus	Version 7.1
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Eus	Version 7.1
Redhat Enterprise Linux Workstation	Version 7.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00000.html

Source: secalert@redhat.com

Third Party Advisory

http://packetstormsecurity.com/files/131598/Android-wpa_supplicant-Heap-Overflow.html

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2015-1090.html

Source: secalert@redhat.com

Third Party Advisory

http://seclists.org/fulldisclosure/2015/Apr/82

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://security.alibaba.com/blog/blog.htm?spm=0.0.0.0.p1ECc3&id=19

Source: secalert@redhat.com

http://w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3233

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/535353/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/74296

Source: secalert@redhat.com

http://www.securitytracker.com/id/1032192

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2577-1

Source: secalert@redhat.com

Third Party Advisory

https://security.gentoo.org/glsa/201606-17

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://packetstormsecurity.com/files/131598/Android-wpa_supplicant-Heap-Overflow.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2015-1090.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://seclists.org/fulldisclosure/2015/Apr/82

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://security.alibaba.com/blog/blog.htm?spm=0.0.0.0.p1ECc3&id=19

Source: af854a3a-2127-422b-91ae-364da2661108

http://w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.debian.org/security/2015/dsa-3233

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/archive/1/535353/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/74296

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1032192

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2577-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.gentoo.org/glsa/201606-17

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.