ALT Linux Team

Package wpa_supplicant update in sisyphus on 2021-03-01

ALT-PU-2021-1414-1

Package wpa_supplicant updated to version 2.9-alt4 for branch sisyphus in task 267189.

Closed vulnerabilities

Published: 2021-02-26

BDU:2021-01584

Уязвимость компонента p2p/p2p_pd.c клиента защищённого доступа Wi-Fi WPA Supplicant, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

Severity: HIGH (7.5) Vector: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM (5.4) Vector: AV:A/AC:M/Au:N/C:P/I:P/A:P
References:
Published: 2021-02-26
Modified: 2024-11-21

CVE-2021-27803

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Severity: MEDIUM (5.4) Vector: AV:A/AC:M/Au:N/C:P/I:P/A:P
Severity: HIGH (7.5) Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top