Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4734-1
HistoryFeb 11, 2021 - 12:00 a.m.

wpa_supplicant and hostapd vulnerabilities

2021-02-1100:00:00
ubuntu.com
167

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

7.9 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

77.5%

JSON

Releases

  • Ubuntu 20.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • wpa - client support for WPA and WPA2

Details

It was discovered that wpa_supplicant did not properly handle P2P
(Wi-Fi Direct) group information in some situations, leading to a
heap overflow. A physically proximate attacker could use this to cause a
denial of service or possibly execute arbitrary code. (CVE-2021-0326)

It was discovered that hostapd did not properly handle UPnP subscribe
messages in some circumstances. An attacker could use this to cause a
denial of service. (CVE-2020-12695)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.10noarchhostapd< 2:2.9-1ubuntu8.1UNKNOWN
Ubuntu20.10noarchhostapd-dbgsym< 2:2.9-1ubuntu8.1UNKNOWN
Ubuntu20.10noarchwpagui< 2:2.9-1ubuntu8.1UNKNOWN
Ubuntu20.10noarchwpagui-dbgsym< 2:2.9-1ubuntu8.1UNKNOWN
Ubuntu20.10noarchwpasupplicant< 2:2.9-1ubuntu8.1UNKNOWN
Ubuntu20.10noarchwpasupplicant-dbgsym< 2:2.9-1ubuntu8.1UNKNOWN
Ubuntu20.10noarchwpasupplicant-udeb< 2:2.9-1ubuntu8.1UNKNOWN
Ubuntu20.04noarchhostapd< 2:2.9-1ubuntu4.2UNKNOWN
Ubuntu20.04noarchhostapd-dbgsym< 2:2.9-1ubuntu4.2UNKNOWN
Ubuntu20.04noarchwpagui< 2:2.9-1ubuntu4.2UNKNOWN
Rows per page:
1-10 of 291

Related

openvas 35
ubuntu 3
osv 18
nessus 48
debian 7
githubexploit 6
alpinelinux 2
attackerkb 1
fedora 8
archlinux 2
ubuntucve 2
cert 1
prion 2
veracode 2
redhatcve 2
redhat 2
cve 2
oraclelinux 2
mageia 3
cvelist 2
cisa 1
debiancve 2
rocky 2
huawei 1
almalinux 2
nvd 2
suse 7
amazon 1
slackware 1
thn 1
malwarebytes 1
threatpost 1
ics 1
openvas
openvas
Ubuntu: Security Advisory (USN-4734-1)
2021-02-12 00:00:00
Ubuntu: Security Advisory (USN-4734-2)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-4898-1)
2021-04-23 00:00:00
ubuntu
ubuntu
wpa_supplicant and hostapd vulnerabilities
2021-02-16 00:00:00
GUPnP vulnerability
2020-09-15 00:00:00
ReadyMedia (MiniDLNA) vulnerabilities
2021-02-04 00:00:00
osv
osv
wpa vulnerabilities
2021-02-16 21:33:59
wpa vulnerabilities
2021-02-11 22:22:17
wpa - security update
2021-04-22 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-4734-1)
2021-02-11 00:00:00
Debian DSA-4898-1 : wpa - security update
2021-04-23 00:00:00
Oracle Linux 8 : gssdp / and / gupnp (ELSA-2021-1789)
2021-05-26 00:00:00
debian
debian
[SECURITY] [DSA 4898-1] wpa security update
2021-04-22 18:52:18
[SECURITY] [DSA 4898-1] wpa security update
2021-04-22 18:52:18
[SECURITY] [DLA 2315-1] gupnp security update
2020-08-06 17:28:11
githubexploit
githubexploit
Exploit for Incorrect Default Permissions in Ui Unifi Controller
2020-06-10 14:18:34
Exploit for Incorrect Default Permissions in Ui Unifi Controller
2020-06-08 07:37:49
Exploit for Out-of-bounds Write in Google Android
2022-04-26 14:41:51
alpinelinux
alpinelinux
CVE-2020-12695
2020-06-08 17:15:09
CVE-2021-0326
2021-02-10 17:15:19
attackerkb
attackerkb
CVE-2020-12695 "CallStranger"
2020-06-08 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: hostapd-2.9-4.fc32
2020-07-03 01:19:38
[SECURITY] Fedora 31 Update: gupnp-1.0.5-1.fc31
2020-07-09 01:07:00
[SECURITY] Fedora 31 Update: gssdp-1.0.4-1.fc31
2020-07-09 01:06:59
archlinux
archlinux
[ASA-202012-16] hostapd: proxy injection
2020-12-09 00:00:00
[ASA-202102-25] wpa_supplicant: arbitrary code execution
2021-02-12 00:00:00
ubuntucve
ubuntucve
CVE-2020-12695
2020-06-08 00:00:00
CVE-2021-0326
2021-02-10 00:00:00
cert
cert
Universal Plug and Play (UPnP) SUBSCRIBE can be abused to send traffic to arbitrary destinations
2020-06-08 00:00:00
prion
prion
Open redirect
2020-06-08 17:15:00
Out-of-bounds
2021-02-10 17:15:00
veracode
veracode
Authorization Bypass
2020-08-06 21:39:39
Privilege Escalation
2021-02-10 16:24:27
redhatcve
redhatcve
CVE-2020-12695
2020-06-10 14:56:13
CVE-2021-0326
2021-02-04 14:55:48
redhat
redhat
(RHSA-2021:1789) Moderate: gssdp and gupnp security update
2021-05-18 06:05:22
(RHSA-2021:1686) Moderate: wpa_supplicant security, bug fix, and enhancement update
2021-05-18 05:50:46
cve
cve
CVE-2020-12695
2020-06-08 17:15:09
CVE-2021-0326
2021-02-10 17:15:19
oraclelinux
oraclelinux
gssdp and gupnp security update
2021-05-25 00:00:00
wpa_supplicant security, bug fix, and enhancement update
2021-05-25 00:00:00
mageia
mageia
Updated gssdp/gupnp packages fix security vulnerability
2020-08-01 02:25:42
Updated wpa_supplicant packages fix a security vulnerability
2021-02-08 20:58:05
Updated minidlna packages fix security vulnerabilities
2020-12-31 17:32:44
cvelist
cvelist
CVE-2020-12695
2020-06-08 16:45:04
CVE-2021-0326
2021-02-10 16:50:40
cisa
cisa
CERT/CC Reports Vulnerability in Universal Plug and Play Protocol
2020-06-09 00:00:00
debiancve
debiancve
CVE-2020-12695
2020-06-08 17:15:09
CVE-2021-0326
2021-02-10 17:15:19
rocky
rocky
gssdp and gupnp security update
2021-05-18 06:05:22
wpa_supplicant security, bug fix, and enhancement update
2021-05-18 05:50:46
huawei
huawei
Security Advisory - CallStranger Vulnerability in UPnP Protocol
2020-07-01 00:00:00
almalinux
almalinux
Moderate: gssdp and gupnp security update
2021-05-18 06:05:22
Moderate: wpa_supplicant security, bug fix, and enhancement update
2021-05-18 05:50:46
nvd
nvd
CVE-2020-12695
2020-06-08 17:15:09
CVE-2021-0326
2021-02-10 17:15:19
suse
suse
Security update for wpa_supplicant (important)
2021-02-13 00:00:00
Security update for minidlna (moderate)
2020-12-10 00:00:00
Security update for minidlna (moderate)
2020-12-07 00:00:00
amazon
amazon
Medium: wpa_supplicant
2021-06-16 20:36:00
slackware
slackware
[slackware-security] wpa_supplicant
2021-12-29 03:28:00
thn
thn
Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models
2021-11-18 12:59:00
malwarebytes
malwarebytes
Cisco Small Business routers vulnerable to remote attacks, won’t get a patch
2021-08-19 20:29:09
threatpost
threatpost
Five Critical Android Bugs Patched, Part of Feb. Security Bulletin
2021-02-03 15:40:01
ics
ics
Siemens SIMATIC
2024-03-14 12:00:00

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

7.9 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

77.5%

JSON
Related for USN-4734-1
openvas35ubuntu3osv18nessus48debian7githubexploit6alpinelinux2attackerkb1fedora8archlinux2ubuntucve2cert1prion2veracode2redhatcve2redhat2cve2oraclelinux2mageia3cvelist2cisa1debiancve2rocky2huawei1almalinux2nvd2suse7amazon1slackware1thn1malwarebytes1threatpost1ics1