CVE-2015-1863
wpa_supplicant: P2P SSID processing vulnerability
Severity
ImportantRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · April 22, 2015
Updated · June 27, 2026
Description
A buffer overflow flaw was found in the way wpa_supplicant handled SSID information in the Wi-Fi Direct / P2P management frames. A specially crafted frame could allow an attacker within Wi-Fi radio range to cause wpa_supplicant to crash or, possibly, execute arbitrary code.
Statement
This issue did not affect the wpa_supplicant versions as shipped with Red Hat Enterprise Linux 5 and 6.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 6.8AV:A/AC:H/Au:N/C:C/I:C/A:C
CWE-787 · Out-of-bounds Write