CVE-2024-28084

CVE-2024-28084 affects iNet wireless daemon (IWD) p2putil.c up to version 2.15. The issue stems from initialization during parsing of advertised service information, enabling denial of service via daemon crash and possibly other unspecified impact. Fedora advisories indicate fixes in iwd 2.16 and...

CVE-2023-52161

CVE-2023-52161 affects iNet Wireless Daemon (IWD) via the Access Point path in eapol_auth_key_handle (eapol.c); vulnerable in IWD versions before 2.14. An attacker can complete the EAPOL handshake by skipping Msg2/Msg4 and sending Msg4/4 with an all-zero key to gain unauthorized access to a prote...

CVE-2020-8689

CVE-2020-8689 affects the Intel(R) Wireless for Open Source stack prior to version 1.5. The issue is described as improper buffer restrictions that may allow an unauthenticated user to potentially cause a denial of service via adjacent access. The connected documents confirm the vulnerability det...

CVE-2020-17497

CVE-2020-17497 affects the iNet wireless daemon (IWD) up to version 1.8. The vulnerability resides in eapol.c and allows an adjacent attacker to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4, potentially compromising the WPA3/RSN key handling. NVD reports a base score of 8.1 (HIGH) ...