CVE-2015-5316

概要

参考情報

• w1.fi/security/2015-8/eap-pwd-unexpected-confirm.txt · Mitigation
• openwall.com/lists/oss-security/2015/11/10/11 · Mailing List
• securityfocus.com/bid/77538 · Third Party Advisory
• ubuntu.com/usn/USN-2808-1 · Broken Link
• debian.org/security/2015/dsa-3397 · Third Party Advisory

wpa supplicant のその他の脆弱性

• CVE-2023-52160中 6.5The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be conf…
• CVE-2022-23304緊急 9.8The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of c…
• CVE-2022-23303緊急 9.8The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache…
• CVE-2021-30004中 5.3In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x5…
• CVE-2021-27803高 7.5A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. …