Launchpad.net

CVE 2015-0210

wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.

See the CVE page on Mitre.org for more details.