Ubuntu: Security Advisory (USN-3505-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3505-1 linux-firmware vulnerabilities

Mathy Vanhoef discovered that the firmware for several Intel WLAN devices incorrectly handled WPA2 in relation to Wake on WLAN. A remote attacker could use this issue with key reinstallation attacks to obtain sensitive information. CVE-2017-13080, CVE-2017-13081...

USN-3505-1: Linux firmware vulnerabilities

Mathy Vanhoef discovered that the firmware for several Intel WLAN devices incorrectly handled WPA2 in relation to Wake on WLAN. A remote attacker could use this issue with key reinstallation attacks to obtain sensitive information. CVE-2017-13080, CVE-2017-13081...

Google Android WLAN Qualcomm component elevation of privilege vulnerability (CNVD-2017-36556)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android WLAN Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36521)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android WLAN Qualcomm component. An attacker could exploit this vulnerability to achieve elevation of privile...

Ubuntu 14.04 LTS / 16.04 LTS : Linux firmware vulnerabilities (USN-3505-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3505-1 advisory. Mathy Vanhoef discovered that the firmware for several Intel WLAN devices incorrectly handled WPA2 in relation to Wake on WLAN. A remote...

PT-2017-13745

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overrun issue occurs when processing the QCA NL80211...

Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-36940)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. An integer overflow vulnerability exists in Qualcomm WLAN in Android. A remote attacker could exploit this vulnerability to execute cod...

HPSBHF03571 rev. 6 - Intel Management Engine Cumulative Security update and fix for WPA2 vulnerability

Potential Security Impact Potential denial of service or escalation of privilege. Source: Intel Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain versions of Intel Active Management Technology, Management Engine Firmware, and Management...

PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol

CVSS v3 6.8 ATTENTION: Public exploits are available. Vendor: PHOENIX CONTACT Equipment: WLAN capable devices using the WPA2 Protocol Vulnerabilities: Reusing a Nonce AFFECTED PRODUCTS PHOENIX CONTACT reports that these vulnerabilities affect all versions of the following WLAN capable devices usi...

Android Qualcomm WLAN Information Disclosure Vulnerability (CNVD-2017-34647)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

PT-2017-11733

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overread issue is observed in the wlan hdd cfg80211...

Authentication flaw

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

Design/Logic Flaw

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is due to a memory leak that occurs on...

CVE-2017-12281

Cisco Aironet 1800/2800/3800 Series Access Points with standalone WLAN configurations (FlexConnect local switching and central authentication with MAC filtering) are affected by CVE-2017-12281 due to an incorrect default fail-open setting. This enables an unauthenticated, adjacent attacker to byp...

CVE-2017-12281

A vulnerability in the implementation of Protected Extensible Authentication Protocol PEAP functionality for standalone configurations of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated, adjacent attacker to bypass authentication and connect to an affected...

PT-2017-3209

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a buffer overflow in the WLAN component of the Android operating system, specifically in the Linux kernel used by Android releases from CAF. The buffer overflow occurs...

RedHat Update for wpa_supplicant RHSA-2017:2911-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2017-3615

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to improper input validation for vdev id in the wma unified bcntx status event handler function, which can lead to a potential out of bounds memory read. This...

[SECURITY] Fedora 25 Update: wpa_supplicant-2.6-3.fc25.1

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...