CVE-2015-1863
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
- Record
CVE-2015-1863- CVSS 2.0
- 5.8 Medium
AV:A/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
- Record
CVE-2015-1863- Updated
- 2026-11-02
EUVDEUVD-2015-1971 No score
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
- Record
EUVD-2015-1971- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5mh9-2ph2-m7gj No score
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
- Record
GHSA-5mh9-2ph2-m7gj- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
- Record
CVE-2015-1863- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-1863 No score
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
- Record
DEBIAN-CVE-2015-1863- Updated
- 2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2024:10022-1 No score
hostapd-2.6-1.1 on GA media
These are all security issues fixed in the hostapd-2.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10022-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10499-1 No score
wpa_supplicant-2.6-1.1 on GA media
These are all security issues fixed in the wpa_supplicant-2.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10499-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1013-1 No score
Security update for wpa_supplicant
wpa_supplicant was updated to fix three security issues:
- CVE-2015-0210: wpa_supplicant: broken certificate subject check this adds the 'domain_match' config option from upstream (additional to the already existing domain_suffix_match)
- CVE-2014-3686: hostapd command execution
- CVE-2015-1863: P2P SSID processing vulnerability
- Record
SUSE-SU-2015:1013-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-1863 No score
Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.
- Record
UBUNTU-CVE-2015-1863- Updated
- 2026-11-02
OSVUSN-2577-1 No score
wpa vulnerability
It was discovered that wpa_supplicant incorrectly handled SSID information when creating or updating P2P peer entries. A remote attacker could use this issue to cause wpa_supplicant to crash, resulting in a denial of service, expose memory contents, or possibly execute arbitrary code.
- Record
USN-2577-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wpaDebian:12 |
before 2.3-2 | 2.3-2 |
wpaDebian:13 |
before 2.3-2 | 2.3-2 |
wpaDebian:14 |
before 2.3-2 | 2.3-2 |
wpaDebian:7 |
before 1.0-3+deb7u2, plus listed versions 1.0-31.0-3+deb7u1 |
1.0-3+deb7u2 |
wpaDebian:8 |
before 2.3-1+deb8u1, plus listed versions 2.3-1 |
2.3-1+deb8u1 |
wpa_supplicantRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 1:2.0-17.el7_1 | 1:2.0-17.el7_1 |
wpa_supplicant-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 1:2.0-17.el7_1 | 1:2.0-17.el7_1 |
wpa_supplicantRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 1:2.0-17.el7_1 | 1:2.0-17.el7_1 |
wpa_supplicant-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 1:2.0-17.el7_1 | 1:2.0-17.el7_1 |
wpa_supplicantRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 1:2.0-17.ael7b_1 | 1:2.0-17.ael7b_1 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wpa_supplicant-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 1:2.0-17.ael7b_1 | 1:2.0-17.ael7b_1 |
wpa_supplicantRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 1:2.0-17.el7_1 | 1:2.0-17.el7_1 |
wpa_supplicant-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 1:2.0-17.el7_1 | 1:2.0-17.el7_1 |
wpa_supplicantSUSE:Linux Enterprise Desktop 12 From an advisory covering 3 CVEs |
before 2.2-8.1 | 2.2-8.1 |
wpa_supplicantSUSE:Linux Enterprise Server 12 From an advisory covering 3 CVEs |
before 2.2-8.1 | 2.2-8.1 |
wpa_supplicantSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 3 CVEs |
before 2.2-8.1 | 2.2-8.1 |
wpaUbuntu:14.04:LTS |
before 2.1-0ubuntu1.2, plus listed versions 1.0-3ubuntu21.0-3ubuntu31.0-3ubuntu42.1-0ubuntu12.1-0ubuntu1.1 |
2.1-0ubuntu1.2 |
hostapdopenSUSE:Tumbleweed From an advisory covering 9 CVEs |
before 2.6-1.1 | 2.6-1.1 |
wpa_supplicantopenSUSE:Tumbleweed From an advisory covering 13 CVEs |
before 2.6-1.1 | 2.6-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-1863 is a medium vulnerability (CVSS 5.8) in Canonical Ubuntu Linux, published April 21, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.19%, the 92nd percentile. Fixed in wpa 2.3-2.
References
w1.fi/security/2015-1/wpa_supplicant-p2p-ssid-overflow.txt
debian.org/security/2015/dsa-3233
securityfocus.com/archive/1/535353/100/0/threaded
ubuntu.com/usn/USN-2577-1
lists.opensuse.org/opensuse-security-announce/2015-05/msg00000.html
seclists.org/fulldisclosure/2015/Apr/82
Show 43 moreShow less
security.alibaba.com/blog/blog.htm?spm=0.0.0.0.p1ECc3&id=19
packetstormsecurity.com/files/131598/Android-wpa_supplicant-Heap-Overflow.html
security.gentoo.org/glsa/201606-17
securitytracker.com/id/1032192
rhn.redhat.com/errata/RHSA-2015-1090.html
nvd.nist.gov/vuln/detail/CVE-2015-1863
github.com/advisories/GHSA-5mh9-2ph2-m7gj
security-tracker.debian.org/tracker/CVE-2015-1863
access.redhat.com/errata/RHSA-2015:1090
bugzilla.redhat.com/show_bug.cgi?id=1178263
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1090.json
cve.org/CVERecord?id=CVE-2015-1863
suse.com/support/update/announcement/2015/suse-su-20151013-1
bugzilla.suse.com/900611
ubuntu.com/security/CVE-2015-1863