CVE-2016-1863

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4582 and CVE-2016-4653...

About the security content of watchOS 2.2.2

About the security content of watchOS 2.2.2 This document describes the security content of watchOS 2.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Oracle: Security Advisory (ELSA-2015-1090)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : wpa_supplicant (CESA-2015:1090)

An updated wpasupplicant package that fixes two security issues and adds one enhancement is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CentOS Update for wpa_supplicant CESA-2015:1090 centos7

Check the version of wpasupplicant SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882197";...

Oracle Linux 7 : wpa_supplicant (ELSA-2015-1090)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1090 advisory. - P2P: Validate SSID element length before copying it CVE-2015-1863 Tenable has extracted the preceding description block directly from the Oracle Linu...

Scientific Linux Security Update : wpa_supplicant on SL7.x x86_64 (20150611)

A buffer overflow flaw was found in the way wpasupplicant handled SSID information in the Wi-Fi Direct / P2P management frames. A specially crafted frame could allow an attacker within Wi-Fi radio range to cause wpasupplicant to crash or, possibly, execute arbitrary code. CVE-2015-1863 An integer...

Important: Red Hat Security Advisory: wpa_supplicant security and enhancement update

An updated wpasupplicant package that fixes two security issues and adds one enhancement is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

wpa_supplicant security and enhancement update

1:2.0-17 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1222015 1:2.0-16 - P2P: Validate SSID element length before copying it CVE-2015-1863 1:2.0-15 - Add domainmatch config option from upstream rh 1178263 - Include peer certificate in EAP events for use by clients...

SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2015:1013-1)

wpasupplicant was updated to fix three security issues : - CVE-2015-0210: wpasupplicant: broken certificate subject check this adds the 'domainmatch' config option from upstream additional to the already existing domainsuffixmatch - CVE-2014-3686: hostapd command execution - CVE-2015-1863: P2P SS...

[slackware-security] wpa_supplicant

New wpasupplicant packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/wpasupplicant-2.4-i486-1slack14.1.txz: Upgraded. This update fixes potential denial of service issues. For more...

[ALICLOUDSEC-VUL2015-001]Android wpa_supplicant WLAN Direct remote buffer overflow

Advisory Information Advisory URL: http://security.alibaba.com/blog/blog.htm?spm=0.0.0.0.p1ECc3&id=19 Date published: 2015-04-23 Date of last update: 2015-04-23 2. Vulnerability Information Class: heap overflow Impact: memory information leak and remote code execution Remote Exploitable: Yes...

openSUSE: Security Advisory for wpa_supplicant (openSUSE-SU-2015:0813-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : wpa_supplicant-2.3-3.fc22 (2015-6898)

This update addresses a security vulnerability identified as CVE-2015-1863 . More information on this vulnerability is provided by upstream at https://w1.fi/security/2015-1/wpasupplicant-p2p-ssid-overflow.txt . An extract : Attacker or a system controlled by the attacker needs to be within radio...

CVE-2015-1863

CVE-2015-1863 is a heap-based buffer overflow in wpa_supplicant (versions 1.0–2.4) that can be triggered via crafted SSID information in P2P management frames, allowing denial of service, memory disclosure, or potential arbitrary code execution. Public reports confirm the issue and Debian/CentOS ...

Fedora Update for wpa_supplicant FEDORA-2015-6860

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3233-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3233-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3233-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3233-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 24, 2015 http://www.debian.org/security/faq -...

Android WiFi Management Component wpa_supplicant presence of high-risk vulnerabilities that can lead to leaked memory information, DoS, denial of service or arbitrary code execution-vulnerability warning-the black bar safety net

Popular WLAN Wireless Network Management Component cwpasupplicant exposed high-risk vulnerabilities CVE-2 0 1 5-1 8 6 3, and can lead to leaked memory information, DoS, denial of service or arbitrary code execution. cwpasupplicant in Android, Linux, BSD, Mac OS X, Windows and some otheroperating...

Oracle Linux 3 : httpd (ELSA-2007-0533)

From Red Hat Security Advisory 2007:0533 : Updated Apache httpd packages that correct two security issues and two bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a...