CVE-2021-27803

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...

CVE-2021-27803

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...

PT-2021-2346

Name of the Vulnerable Software and Affected Versions wpa supplicant versions prior to 2.10 Description A vulnerability in the p2p/p2p pd.c component of wpa supplicant is related to resource release errors. Exploitation of this issue could allow a remote attacker to cause a denial of service or...

CVE-2020-11276

Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

Buffer overflow

Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

CVE-2020-11276

CVE-2020-11276 is a buffer over-read in processing P2P IE and NOA attributes in beacon/probe frames due to improper validation of P2P IE/NOA lengths in Qualcomm Snapdragon firmware (across Snapdragon Auto, Compute, Connectivity, and related Snapdragon lines). Root cause is incorrect length valida...

CVE-2020-11276

Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

openSUSE Security Update : wpa_supplicant (openSUSE-2021-284)

This update for wpasupplicant fixes the following issues : - CVE-2021-0326: P2P group information processing vulnerability bsc1181777. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SUSE-SU-2021:0477-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2021-0326: P2P group information processing vulnerability bsc1181777...

OPENSUSE-SU-2021:0284-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2021-0326: P2P group information processing vulnerability bsc1181777. This update was imported from the SUSE:SLE-15:Update update project...

Security update for wpa_supplicant (important)

openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2021:0284-1 Rating: important References: 1181777 Cross-References: CVE-2021-0326 CVSS scores: CVE-2021-0326 SUSE: 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...

[ASA-202102-25] wpa_supplicant: arbitrary code execution

Arch Linux Security Advisory ASA-202102-25 ========================================== Severity: High Date : 2021-02-12 CVE-ID : CVE-2021-0326 Package : wpasupplicant Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1530 Summary ======= The package wpasupplica...

USN-4734-1: wpa_supplicant and hostapd vulnerabilities

It was discovered that wpasupplicant did not properly handle P2P Wi-Fi Direct group information in some situations, leading to a heap overflow. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2021-0326 It was discovered that...

ALPINE-CVE-2021-0326

In p2pcopyclientinfo of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for...

MGASA-2021-0075 Updated wpa_supplicant packages fix a security vulnerability

A vulnerability was discovered in how wpasupplicant processing P2P Wi-Fi Direct group information from active group owners. The actual parsing of that information validates field lengths appropriately, but processing of the parsed information misses a length check when storing a copy of the...

Updated wpa_supplicant packages fix a security vulnerability

A vulnerability was discovered in how wpasupplicant processing P2P Wi-Fi Direct group information from active group owners. The actual parsing of that information validates field lengths appropriately, but processing of the parsed information misses a length check when storing a copy of the...

CVE-2021-0326

A buffer overflow flaw was found in the P2P Wi-Fi Direct support of wpasupplicant. This flaw allows an attacker within radio range of the vulnerable system to send a specially crafted management frame that triggers a P2P peer device information to be created or updated, leading to the crashing of...

ASB-A-172937525

In p2pcopyclientinfo of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-25173

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

CVE-2020-25169

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...