PT-2015-6994

Name of the Vulnerable Software and Affected Versions NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.6.0 and earlier for Android NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.0.2 and earlier for iOS Description The issue is related to a...

CVE-2015-5630: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID...

wpa_supplicant: P2P SSID processing vulnerability

A buffer overflow flaw was found in the way wpasupplicant handled SSID information in the Wi-Fi Direct / P2P management frames. A specially crafted frame could allow an attacker within Wi-Fi radio range to cause wpasupplicant to crash or, possibly, execute arbitrary code...

wpa_supplicant security and enhancement update

1:2.0-17 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1222015 1:2.0-16 - P2P: Validate SSID element length before copying it CVE-2015-1863 1:2.0-15 - Add domainmatch config option from upstream rh 1178263 - Include peer certificate in EAP events for use by clients...

SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2015:1013-1)

wpasupplicant was updated to fix three security issues : - CVE-2015-0210: wpasupplicant: broken certificate subject check this adds the 'domainmatch' config option from upstream additional to the already existing domainsuffixmatch - CVE-2014-3686: hostapd command execution - CVE-2015-1863: P2P SS...

WAIDPS - Wireless Auditing, Intrusion Detection & Prevention System

WAIDPS is an open source wireless swissknife written in Python and work on Linux environment. This is a multipurpose tools designed for audit penetration testing networks, detect wireless intrusion WEP/WPA/WPS attacks and also intrusion prevention stopping station from associating to access point...

CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

Heap overflow

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

FreeBSD : wpa_supplicant -- P2P SSID processing vulnerability (cb9d2fcd-eb47-11e4-b03e-002590263bf5)

Jouni Malinen reports : A vulnerability was found in how wpasupplicant uses SSID information parsed from management frames that create or update P2P peer entries e.g., Probe Response frame or number of P2P Public Action frames. SSID field has valid length range of 0-32 octets. However, it is...

wpa_supplicant P2P SSID Handling Vulnerability

wpasupplicant is a set of daemons that run in the background to support WEP, WPA/WPA2 and WAPI wireless protocols and encrypted authentication. A buffer overflow vulnerability exists in the wpasupplicant 'p2padddevice' function src/p2p/p2p.c, which allows an attacker to submit a specially crafted...

Debian Security Advisory DSA 3233-1 (wpa - security update)

The Google security team and the smart hardware research group of Alibaba security team discovered a flaw in how wpasupplicant used SSID information when creating or updating P2P peer entries. A remote attacker can use this flaw to cause wpasupplicant to crash, expose memory contents, and...

DSA-3233-1 wpa - security update

Bulletin has no description...

wpa_supplicant: arbitrary code execution

A vulnerability was found in how wpasupplicant uses SSID information parsed from management frames that create or update P2P peer entries e.g., Probe Response frame or number of P2P Public Action frames. SSID field has valid length range of 0-32 octets. However, it is transmitted in an element th...

Ubuntu: Security Advisory (USN-2577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2577-1 wpa vulnerability

It was discovered that wpasupplicant incorrectly handled SSID information when creating or updating P2P peer entries. A remote attacker could use this issue to cause wpasupplicant to crash, resulting in a denial of service, expose memory contents, or possibly execute arbitrary code...

USN-2577-1: wpa_supplicant vulnerability

It was discovered that wpasupplicant incorrectly handled SSID information when creating or updating P2P peer entries. A remote attacker could use this issue to cause wpasupplicant to crash, resulting in a denial of service, expose memory contents, or possibly execute arbitrary code...

Debian: Security Advisory (DSA-3233-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...