Security update for wpa_supplicant SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:2221-1 Final 1 1 2015-12-07T14:22:51Z current 2015-12-07T14:22:51Z 2015-12-07T14:22:51Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for wpa_supplicant wpa_supplicant was updated to fix two security issues. These security issues were fixed: - CVE-2015-4142: Integer underflow in the WMM Action frame parser in hostapd and wpa_supplicant, when used for AP mode MLME/SME functionality, allowed remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read (bsc#930078). - CVE-2015-4141: The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), allowed remote attackers to cause a denial of service (crash) via a negative chunk length, which triggered an out-of-bounds read or heap-based buffer overflow (bsc#930077). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sledsp3-wpa_supplicant-12252,sledsp4-wpa_supplicant-12252,slessp3-wpa_supplicant-12252,slessp4-wpa_supplicant-12252 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20152221-1/ Link for SUSE-SU-2015:2221-1 https://lists.suse.com/pipermail/sle-security-updates/2015-December/001725.html E-Mail link for SUSE-SU-2015:2221-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/930077 SUSE Bug 930077 https://bugzilla.suse.com/930078 SUSE Bug 930078 https://www.suse.com/security/cve/CVE-2015-4141/ SUSE CVE CVE-2015-4141 page https://www.suse.com/security/cve/CVE-2015-4142/ SUSE CVE CVE-2015-4142 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 wpa_supplicant-0.7.1-6.17.4 wpa_supplicant-gui-0.7.1-6.17.4 wpa_supplicant-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Desktop 11 SP3 wpa_supplicant-gui-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Desktop 11 SP3 wpa_supplicant-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Desktop 11 SP4 wpa_supplicant-gui-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Desktop 11 SP4 wpa_supplicant-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Server 11 SP3 wpa_supplicant-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA wpa_supplicant-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Server 11 SP4 wpa_supplicant-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 wpa_supplicant-0.7.1-6.17.4 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow. CVE-2015-4141 SUSE Linux Enterprise Desktop 11 SP3:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Desktop 11 SP3:wpa_supplicant-gui-0.7.1-6.17.4 SUSE Linux Enterprise Desktop 11 SP4:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Desktop 11 SP4:wpa_supplicant-gui-0.7.1-6.17.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server 11 SP3:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server for SAP Applications 11 SP3:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.17.4 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20152221-1/ https://www.suse.com/security/cve/CVE-2015-4141.html CVE-2015-4141 https://bugzilla.suse.com/915323 SUSE Bug 915323 https://bugzilla.suse.com/930077 SUSE Bug 930077 Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read. CVE-2015-4142 SUSE Linux Enterprise Desktop 11 SP3:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Desktop 11 SP3:wpa_supplicant-gui-0.7.1-6.17.4 SUSE Linux Enterprise Desktop 11 SP4:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Desktop 11 SP4:wpa_supplicant-gui-0.7.1-6.17.4 SUSE Linux Enterprise Server 11 SP3-TERADATA:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server 11 SP3:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server 11 SP4:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server for SAP Applications 11 SP3:wpa_supplicant-0.7.1-6.17.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wpa_supplicant-0.7.1-6.17.4 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20152221-1/ https://www.suse.com/security/cve/CVE-2015-4142.html CVE-2015-4142 https://bugzilla.suse.com/915323 SUSE Bug 915323 https://bugzilla.suse.com/930078 SUSE Bug 930078