Lucene search
PRIOn knowledge basePRION:CVE-2023-52161HistoryFeb 22, 2024 - 5:15 p.m.
Code injection
2024-02-2217:15:00
PRIOn knowledge base
www.prio-n.com
2
code injection
access point
eapol handshake
wi-fi network
unauthorized access
The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.
| CPE | Name | Operator | Version |
|---|---|---|---|
| inet_wireless_daemon | lt | 2.14 |
References
git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=6415420f1c92012f64063c131480ffcef58e60ca
iwd.wiki.kernel.org/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A/
www.top10vpn.com/research/wifi-vulnerabilities/
Related
openvas
openvas
Fedora: Security Advisory for iwd (FEDORA-2024-fdce971b84)
2024-03-08 00:00:00
Fedora: Security Advisory for iwd (FEDORA-2024-38faa9a2a8)
2024-03-08 00:00:00
Fedora: Security Advisory for iwd (FEDORA-2024-58c59bfa4c)
2024-03-25 00:00:00
osv
osv
iwd - security update
2024-02-22 00:00:00
iwd - security update
2024-02-25 00:00:00
cvelist
cvelist
CVE-2023-52161
2024-02-22 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: iwd-2.15-1.fc39
2024-03-08 01:19:37
[SECURITY] Fedora 40 Update: libell-0.63-1.fc40
2024-03-23 00:44:54
[SECURITY] Fedora 39 Update: libell-0.63-1.fc39
2024-03-08 01:19:37
nessus
nessus
Fedora 40 : iwd / libell (2024-58c59bfa4c)
2024-04-29 00:00:00
Fedora 38 : iwd / libell (2024-38faa9a2a8)
2024-03-07 00:00:00
Debian dla-3738 : iwd - security update
2024-02-22 00:00:00
alpinelinux
alpinelinux
CVE-2023-52161
2024-02-22 17:15:08
nvd
nvd
CVE-2023-52161
2024-02-22 17:15:08
debian
debian
[SECURITY] [DSA 5631-1] iwd security update
2024-02-25 10:45:49
[SECURITY] [DLA 3738-1] iwd security update
2024-02-22 15:08:20
cve
cve
CVE-2023-52161
2024-02-22 17:15:08
debiancve
debiancve
CVE-2023-52161
2024-02-22 17:15:08
veracode
veracode
Improper Authentication
2024-02-20 15:58:33
ubuntucve
ubuntucve
CVE-2023-52161
2024-02-22 00:00:00
thn
thn
New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers
2024-02-21 16:16:00