CVE Database›CVE-2015-1863

CVE-2015-1863

wpa_supplicant: P2P SSID processing vulnerability

Loading…

Severity

Important

Red Hat Product Security

6.8

CVSS 2.0

Review impact separately from score.

Published · April 22, 2015

Updated · June 27, 2026

Description

A buffer overflow flaw was found in the way wpa_supplicant handled SSID information in the Wi-Fi Direct / P2P management frames. A specially crafted frame could allow an attacker within Wi-Fi radio range to cause wpa_supplicant to crash or, possibly, execute arbitrary code.

Statement

This issue did not affect the wpa_supplicant versions as shipped with Red Hat Enterprise Linux 5 and 6.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 6.8
AV:A/AC:H/Au:N/C:C/I:C/A:C

CWE-787 · Out-of-bounds Write