SUSE-SU-2024:0818-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication bsc1219975...

SUSE-SU-2024:0764-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication bsc1219975...

Advisory ROSA-SA-2024-2367

software: hostapd 2.9 WASP: ROSA-CHROME packageevrstring: hostapd-2.9-2.src.rpm CVE-ID: CVE-2022-23303 BDU-ID: 2022-07363 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the SAE implementation of the Wi-Fi WPA Supplicant secure access client is related to information disclosure via a mismatch...

The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.

...

Debian: Security Advisory (DLA-3743-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3743-1] wpa security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3743-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 27, 2024 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 39 Update: wpa_supplicant-2.10-9.fc39

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

DLA-3743-1 wpa - security update

Bulletin has no description...

Fedora: Security Advisory (FEDORA-2024-a95bdde55b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-35457 CVE-2023-52160 affecting package wpa_supplicant for versions less than 2.10-2

The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eappeapdecrypt vulnerability can then be abused to skip Phase 2...

AZL-35483 CVE-2023-52160 affecting package wpa_supplicant for versions less than 2.10-2

The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eappeapdecrypt vulnerability can then be abused to skip Phase 2...

DEBIAN-CVE-2023-52160

The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eappeapdecrypt vulnerability can then be abused to skip Phase 2...

ALPINE-CVE-2023-52160

The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eappeapdecrypt vulnerability can then be abused to skip Phase 2...

Researchers Uncover How Outlook Vulnerability Could Leak Your NTLM Passwords

A now-patched security flaw in Microsoft Outlook could be exploited by threat actors to access NT LAN Manager NTLM v2 hashed passwords when opening a specially crafted file. The issue, tracked as CVE-2023-35636 CVSS score: 6.5, was addressed by the tech giant as part of its Patch Tuesday updates...

Advisory ROSA-SA-2023-2311

software: hostapd 2.9 WASP: ROSA-CHROME packageevrstring: hostapd-2.9-2.src.rpm CVE-ID: CVE-2022-23303 BDU-ID: 2022-07363 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the SAE implementation of the Wi-Fi WPA Supplicant secure access client is related to information disclosure via a mismatch...

CVE-2023-33098

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

Code injection

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

CVE-2023-33098

CVE-2023-33098 describes a transient Denial of Service in WLAN firmware when parsing WPA IES with length exceeding the expected size. The root cause is a buffer over-read in Qualcomm WLAN firmware (Qualcomm components; closed-source) leading to DoS with no user interaction and network-based explo...

CVE-2023-33098 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

PT-2023-24184 · Qualcomm · 315 5G Iot Modem Firmware +236

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs while parsing WPA IES when it is passed with a length more than the expected size...