CVE-2015-1863

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2015-05/msg00000.html · Third Party Advisory
• packetstormsecurity.com/files/131598/Android-wpa_supplicant-Heap-Overflow.html · Third Party Advisory
• rhn.redhat.com/errata/RHSA-2015-1090.html · Third Party Advisory
• seclists.org/fulldisclosure/2015/Apr/82 · Third Party Advisory
• security.alibaba.com/blog/blog.htm
• w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt · Third Party Advisory
• debian.org/security/2015/dsa-3233 · Third Party Advisory
• securityfocus.com/archive/1/535353/100/0/threaded
• securityfocus.com/bid/74296
• securitytracker.com/id/1032192 · Third Party Advisory
• ubuntu.com/usn/USN-2577-1 · Third Party Advisory
• security.gentoo.org/glsa/201606-17

wpa supplicant のその他の脆弱性

• CVE-2023-52160中 6.5The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be conf…
• CVE-2022-23304緊急 9.8The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of c…
• CVE-2022-23303緊急 9.8The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache…
• CVE-2021-30004中 5.3In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x5…
• CVE-2021-27803高 7.5A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. …