Lucene search
+L

2 matches found

Mageia
Mageia
added 2024/03/06 4:53 p.m.58 views

Updated wpa_supplicant packages fix security vulnerabilities

The updated packages fix a security vulnerability: The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eappeapdecrypt...

6.5CVSS7.4AI score0.01177EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/02/17 3:22 a.m.8 views

SUSE CVE-2023-52160

The implementation of PEAP in wpasupplicant through 2.10 allows authentication bypass. For a successful attack, wpasupplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eappeapdecrypt vulnerability can then be abused to skip Phase 2...

6.5CVSS9.3AI score0.01177EPSS
SaveExploits0References9
Rows per page
Query Builder