[ASA-202102-25] wpa_supplicant: arbitrary code execution

Arch Linux Security Advisory ASA-202102-25 ========================================== Severity: High Date : 2021-02-12 CVE-ID : CVE-2021-0326 Package : wpasupplicant Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1530 Summary ======= The package wpasupplica...

USN-4734-1: wpa_supplicant and hostapd vulnerabilities

It was discovered that wpasupplicant did not properly handle P2P Wi-Fi Direct group information in some situations, leading to a heap overflow. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2021-0326 It was discovered that...

ALPINE-CVE-2021-0326

In p2pcopyclientinfo of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for...

MGASA-2021-0075 Updated wpa_supplicant packages fix a security vulnerability

A vulnerability was discovered in how wpasupplicant processing P2P Wi-Fi Direct group information from active group owners. The actual parsing of that information validates field lengths appropriately, but processing of the parsed information misses a length check when storing a copy of the...

Updated wpa_supplicant packages fix a security vulnerability

A vulnerability was discovered in how wpasupplicant processing P2P Wi-Fi Direct group information from active group owners. The actual parsing of that information validates field lengths appropriately, but processing of the parsed information misses a length check when storing a copy of the...

CVE-2021-0326

A buffer overflow flaw was found in the P2P Wi-Fi Direct support of wpasupplicant. This flaw allows an attacker within radio range of the vulnerable system to send a specially crafted management frame that triggers a P2P peer device information to be created or updated, leading to the crashing of...

PT-2021-1507

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11 Description: The issue is related to a possible out of bounds write in the p2p copy client info function of the p2p.c file due to a missing bounds check. This could lead to remote code execution...

ASB-A-172937525

In p2pcopyclientinfo of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-25173

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

CVE-2020-25169

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...

Design/Logic Flaw

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

Information disclosure

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...

CVE-2020-25169

The CVE-2020-25169 issue affects Reolink P2P cameras, where data transferred between the local device and Reolink servers may be exposed due to cleartext transmission of sensitive information. The advisory notes a high risk with CVSS v3 base score up to 9.1 (ATT&CK context not explicitly listed i...

CVE-2020-25173 Reolink P2P Cameras

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

CVE-2020-25173

CVE-2020-25173 affects Reolink P2P cameras. Multiple connected sources confirm a fixed cryptography key is exposed, enabling an attacker with local network access to potentially decrypt tokens and compromise cameras beyond the local network. Root cause: hard-coded/fixed cryptographic material. Im...

CVE-2020-25173: Use of Hard-coded Cryptographic Key

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

CVE-2020-25169: Cleartext Transmission of Sensitive Information

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...

PT-2021-11109

Name of the Vulnerable Software and Affected Versions: Reolink P2P products affected versions not specified Description: The issue concerns insufficient protection of data transferred between local devices and Reolink servers, potentially allowing attackers to access sensitive information like...

PT-2021-11110

Name of the Vulnerable Software and Affected Versions: Reolink P2P cameras affected versions not specified Description: An attacker with local network access can obtain a fixed cryptography key, potentially allowing for further compromise of the cameras outside of local network access...

Constructor.Win32.SMWG.c Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/47e819a6ce3d5e93819f4842cfbe23d6.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Constructor.Win32.SMWG.c Vulnerability: Insecure Permissions Description: Description: SMWG - P2P...