Advisory ROSA-SA-2023-2162

🗓️ 03 May 2023 11:24:32Reported by ROSA LABType

Advisory ROSA-SA-2023-2162, wpa_supplicant 2.10, vulnerability in SAE and EAP-pwd implementation, information disclosure ris

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: Crypto Hardware Initialization and Maintenance is vulnerable to arbitrary code execution due to Apache Log4j (CVE 2021-4104, CVE 2022-23302, CVE 2022-23305, CVE 2022-23307)	11 May 202214:31	–	ibm
AlpineLinux	CVE-2022-23303	17 Jan 202200:00	–	alpinelinux
AlpineLinux	CVE-2022-23304	17 Jan 202200:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in wpa	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux – Vulnerability in wpa	20 May 202605:53	–	astralinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
BDU FSTEC	The vulnerability of the SAE implementation for secure Wi-Fi access control software, WPA Supplicant, arises from information disclosure due to incompatibility. This allows attackers to expose the protected information.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the EAP-pwd client implementation for Wi-Fi WPA Supplicant allows information disclosure due to incompatibility, enabling attackers to expose sensitive information.	22 Dec 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-23303 affecting package wpa_supplicant 2.9-4	8 Feb 202203:14	–	cbl_mariner
CBLMariner	CVE-2022-23304 affecting package wpa_supplicant 2.9-4	8 Feb 202203:14	–	cbl_mariner