SUSE-SU-2016:2305-1

Advisory lineage Upstream: 5 Downstream: 0
Published: 14 Sept 2016, 13:37
Last modified:04 Feb 2026, 02:52

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

14 Sept 2016, 13:37
Published
Vulnerability first disclosed
04 Feb 2026, 02:52
Last Modified
Vulnerability information updated

Description

Security update for wpa_supplicant This update for wpa_supplicant fixes the following issues: - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. (bnc#930077) - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. (bnc#930078) - CVE-2015-4143: EAP-pwd missing payload length validation. (bnc#930079) - CVE-2015-5310: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use. (bsc#952254) - CVE-2015-8041: Fix payload length validation in NDEF record parser. (bsc#937419)

Affected Systems

  • suse•wpa_supplicant&distro=SUSE Linux Enterprise Desktop 12 SP1

    < 2.2-14.2

  • suse•wpa_supplicant&distro=SUSE Linux Enterprise Server 12 SP1

    < 2.2-14.2

  • suse•wpa_supplicant&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1

    < 2.2-14.2

References (11)