Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

openSUSE 13.2: 2015:0813-1 Important: wpa_supplicant Buffer Overflow

opensuse
Calendar Grey May 1, 2015
Dist Opensuse Esm H88
Highlighting vital enhancements for wpa_supplicant in openSUSE, mitigating possible buffer overflow vulnerabilities linked to SSID processing.
An update that fixes one vulnerability is now available.

Description

The wireless network encryption and authentication daemon wpa_supplicant

was updated to fix a security issue.

The following vulnerability was fixed:

* CVE-2015-1863: A buffer overflow in handling SSIDs in P2P management

frames allowed attackers in radio range to crash, expose memory content

or potentially execute arbitrary code.

Topics%20covered

Topics Covered

security advisory buffer overflow important wpa_supplicant openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2015-341=1

- openSUSE 13.1:

zypper in -t patch openSUSE-2015-341=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (i586 x86_64):

wpa_supplicant-2.2-5.4.1

wpa_supplicant-debuginfo-2.2-5.4.1

wpa_supplicant-debugsource-2.2-5.4.1

wpa_supplicant-gui-2.2-5.4.1

wpa_supplicant-gui-debuginfo-2.2-5.4.1

- openSUSE 13.1 (i586 x86_64):

wpa_supplicant-2.0-3.11.1

wpa_supplicant-debuginfo-2.0-3.11.1

wpa_supplicant-debugsource-2.0-3.11.1

wpa_supplicant-gui-2.0-3.11.1

wpa_supplicant-gui-debuginfo-2.0-3.11.1

References

https://www.suse.com/security/cve/CVE-2015-1863.html

https://bugzilla.suse.com/927558

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:0813-1
Rating: important
Affected Products: openSUSE 13.2 openSUSE 13.1

Topics%20covered

Topics Covered

security advisory buffer overflow important wpa_supplicant openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.