Updated wpa_supplicant packages fix security vulnerability

🗓️ 18 Jan 2022 19:29:46Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 117 Views

Updated wpa_supplicant packages fix security vulnerabilit

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: Crypto Hardware Initialization and Maintenance is vulnerable to arbitrary code execution due to Apache Log4j (CVE 2021-4104, CVE 2022-23302, CVE 2022-23305, CVE 2022-23307)	11 May 202214:31	–	ibm
AlpineLinux	CVE-2022-23303	17 Jan 202200:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in wpa	3 May 202623:59	–	astralinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
BDU FSTEC	The vulnerability of the SAE implementation for secure Wi-Fi access control software, WPA Supplicant, arises from information disclosure due to incompatibility. This allows attackers to expose the protected information.	22 Dec 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-23303 affecting package wpa_supplicant 2.9-4	8 Feb 202203:14	–	cbl_mariner
CBLMariner	CVE-2022-23303 affecting package wpa_supplicant for versions less than 2.10-1	9 Apr 202206:51	–	cbl_mariner
Circl	CVE-2022-23303	17 Jan 202207:22	–	circl
CNNVD	hostapd 加密问题漏洞	17 Jan 202200:00	–	cnnvd
CVE	CVE-2022-23303	17 Jan 202200:00	–	cve

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	8	any	wpa_supplicant	2.9-8.3	wpa_supplicant-2.9-8.3.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
w1	www.w1.fi/security/2022-1/sae-eap-pwd-side-channel-attack-update-2.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23303

18 Jan 2022 19:29Current

2.2Low risk

Vulners AI Score2.2

CVSS 26.8

CVSS 3.19.8

EPSS0.02944

wpa_supplicant sae side channel attacks