Every CVE Search/ Get API key

CVE-2021-27803

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P ...

7.5 HighFix available

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.23%Down 2.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
CVE-2021-27803
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
5.4 MediumAV:A/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
CVE-2021-27803
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2021-14544 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
EUVD-2021-14544
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-66mx-93rr-rg39 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P ...

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
GHSA-66mx-93rr-rg39
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALPINE-CVE-2021-27803 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
ALPINE-CVE-2021-27803
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-6973 7.5

CVE-2021-27803 affecting package wpa_supplicant for versions less than 2.9-4

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
AZL-6973
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVBELL-CVE-2021-27803 7.5

CVE-2021-27803 does not affect BellSoft software

Record
BELL-CVE-2021-27803
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
CVE-2021-27803
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-27803 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
DEBIAN-CVE-2021-27803
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2021-1133 7.5

wpa_supplicant security update

wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.

Security Fix(es):

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.(CVE-2021-27803)

Record
OESA-2021-1133
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0808 7.5

Red Hat Security Advisory: wpa_supplicant security update

Record
RHSA-2021:0808
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0809 7.5

Red Hat Security Advisory: wpa_supplicant security update

Record
RHSA-2021:0809
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0816 7.5

Red Hat Security Advisory: wpa_supplicant security update

Record
RHSA-2021:0816
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0818 7.5

Red Hat Security Advisory: wpa_supplicant security update

Record
RHSA-2021:0818
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-27803 7.5

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

Record
UBUNTU-CVE-2021-27803
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2021-0095 No score

Updated wpa_supplicant packages fix security vulnerability

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range (CVE-2021-27803).

Record
MGASA-2021-0095
Updated
2026-11-02
OSVopenSUSE-SU-2021:0404-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0404-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11515-1 No score

wpa_supplicant-2.9-13.4 on GA media

These are all security issues fixed in the wpa_supplicant-2.9-13.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11515-1
Updated
2026-11-02
OSVSUSE-SU-2021:0720-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).
Record
SUSE-SU-2021:0720-1
Updated
2026-11-02
OSVSUSE-SU-2021:0721-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).
Record
SUSE-SU-2021:0721-1
Updated
2026-11-02
OSVSUSE-SU-2021:0745-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2021-27803: P2P provision discovery processing vulnerability (bsc#1182805)
Record
SUSE-SU-2021:0745-1
Updated
2026-11-02
OSVUSN-4757-1 No score

wpa vulnerability

It was discovered that wpa_supplicant did not properly handle P2P (Wi-Fi Direct) provision discovery requests in some situations. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code.

Record
USN-4757-1
Updated
2026-11-02
OSVUSN-4757-2 No score

wpa vulnerability

USN-4757-1 fixed a vulnerability in wpa_supplicant and hostapd. This update provides the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that wpa_supplicant did not properly handle P2P (Wi-Fi Direct) provision discovery requests in some situations. A physically proximate attacker could use this to cause a denial of service or possibly execute arbitrary code.

Record
USN-4757-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wpa_supplicant
Alpine:v3.10
 1.0 up to 2.8-r5
2.8-r5
wpa_supplicant
Alpine:v3.11
 1.0 up to 2.9-r7
2.9-r7
wpa_supplicant
Alpine:v3.12
 1.0 up to 2.9-r7
2.9-r7
wpa_supplicant
Alpine:v3.13
 1.0 up to 2.9-r10
2.9-r10
wpa_supplicant
Alpine:v3.14
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.15
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.16
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.17
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.18
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.19
 1.0 up to 2.9-r12
2.9-r12
Show 66 moreShow less
Affected packages
PackageAffectedFixed
wpa_supplicant
Alpine:v3.20
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.21
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.22
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.23
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Alpine:v3.24
 1.0 up to 2.9-r12
2.9-r12
wpa_supplicant
Azure Linux:2
 before 2.9-4
2.9-4
wpa
Debian:12
 before 2:2.9.0-21
2:2.9.0-21
wpa
Debian:13
 before 2:2.9.0-21
2:2.9.0-21
wpa
Debian:14
 before 2:2.9.0-21
2:2.9.0-21
wpa
Debian:9
 before 2:2.4-1+deb9u9, plus listed versions
2:2.4-12:2.4-1+deb9u12:2.4-1+deb9u22:2.4-1+deb9u32:2.4-1+deb9u42:2.4-1+deb9u62:2.4-1+deb9u72:2.4-1+deb9u8
2:2.4-1+deb9u9
wpa
Debian:10
From an advisory covering 3 CVEs
 before 2:2.7+git20190128+0c1e29f-6+deb10u3, plus listed versions
2:2.7+git20190128+0c1e29f-62:2.7+git20190128+0c1e29f-6+deb10u12:2.7+git20190128+0c1e29f-6+deb10u2
2:2.7+git20190128+0c1e29f-6+deb10u3
wpa_supplicant
Mageia:7
 before 2.9-1.4.mga7
2.9-1.4.mga7
wpa_supplicant
Mageia:8
 before 2.9-8.1.mga8
2.9-8.1.mga8
wpa_supplicant
openEuler:20.03-LTS
 before 2.6-28.oe1
2.6-28.oe1
wpa_supplicant
openEuler:20.03-LTS-SP1
 before 2.6-28.oe1
2.6-28.oe1
wpa_supplicant
Red Hat:enterprise_linux:7::client
 before 1:2.6-12.el7_9.2
1:2.6-12.el7_9.2
wpa_supplicant-debuginfo
Red Hat:enterprise_linux:7::client
 before 1:2.6-12.el7_9.2
1:2.6-12.el7_9.2
wpa_supplicant
Red Hat:enterprise_linux:7::server
 before 1:2.6-12.el7_9.2
1:2.6-12.el7_9.2
wpa_supplicant-debuginfo
Red Hat:enterprise_linux:7::server
 before 1:2.6-12.el7_9.2
1:2.6-12.el7_9.2
wpa_supplicant
Red Hat:enterprise_linux:7::workstation
 before 1:2.6-12.el7_9.2
1:2.6-12.el7_9.2
wpa_supplicant-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 1:2.6-12.el7_9.2
1:2.6-12.el7_9.2
wpa_supplicant
Red Hat:enterprise_linux:8::baseos
 before 1:2.9-2.el8_3.1
1:2.9-2.el8_3.1
wpa_supplicant-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 1:2.9-2.el8_3.1
1:2.9-2.el8_3.1
wpa_supplicant-debugsource
Red Hat:enterprise_linux:8::baseos
 before 1:2.9-2.el8_3.1
1:2.9-2.el8_3.1
wpa_supplicant
Red Hat:rhel_eus:8.2::baseos
 before 1:2.9-2.el8_2.1
1:2.9-2.el8_2.1
wpa_supplicant-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 1:2.9-2.el8_2.1
1:2.9-2.el8_2.1
wpa_supplicant-debugsource
Red Hat:rhel_eus:8.2::baseos
 before 1:2.9-2.el8_2.1
1:2.9-2.el8_2.1
wpa_supplicant
Red Hat:rhel_eus:8.1::baseos
 before 1:2.7-2.el8_1.1
1:2.7-2.el8_1.1
wpa_supplicant-debuginfo
Red Hat:rhel_eus:8.1::baseos
 before 1:2.7-2.el8_1.1
1:2.7-2.el8_1.1
wpa_supplicant-debugsource
Red Hat:rhel_eus:8.1::baseos
 before 1:2.7-2.el8_1.1
1:2.7-2.el8_1.1
wpa_supplicant
SUSE:Linux Enterprise Server 12 SP5
 before 2.9-23.9.2
2.9-23.9.2
wpa_supplicant
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.9-23.9.2
2.9-23.9.2
wpa_supplicant
SUSE:Linux Enterprise Module for Basesystem 15 SP2
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise Server 15-LTSS
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise Server for SAP Applications 15
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Manager Proxy 4.0
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Manager Retail Branch Server 4.0
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Manager Server 4.0
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:Enterprise Storage 6
 before 2.9-4.26.1
2.9-4.26.1
wpa_supplicant
SUSE:HPE Helion OpenStack 8
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:OpenStack Cloud 7
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:OpenStack Cloud 8
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:OpenStack Cloud 9
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:OpenStack Cloud Crowbar 8
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:OpenStack Cloud Crowbar 9
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 2.6-15.16.1
2.6-15.16.1
wpa_supplicant
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 2.6-15.16.1
2.6-15.16.1
wpa
Ubuntu:Pro:14.04:LTS
 before 2.1-0ubuntu1.7+esm4, plus listed versions
1.0-3ubuntu21.0-3ubuntu31.0-3ubuntu42.1-0ubuntu12.1-0ubuntu1.1
Show 9 moreShow less
2.1-0ubuntu1.22.1-0ubuntu1.32.1-0ubuntu1.42.1-0ubuntu1.52.1-0ubuntu1.62.1-0ubuntu1.72.1-0ubuntu1.7+esm12.1-0ubuntu1.7+esm22.1-0ubuntu1.7+esm3
2.1-0ubuntu1.7+esm4
wpa
Ubuntu:16.04:LTS
 before 2.4-0ubuntu6.8, plus listed versions
2.4-0ubuntu32.4-0ubuntu42.4-0ubuntu52.4-0ubuntu62.4-0ubuntu6.2
Show 5 moreShow less
2.4-0ubuntu6.32.4-0ubuntu6.42.4-0ubuntu6.52.4-0ubuntu6.62.4-0ubuntu6.7
2.4-0ubuntu6.8
wpa
Ubuntu:18.04:LTS
 before 2:2.6-15ubuntu2.8, plus listed versions
2.4-0ubuntu102:2.4-1.1ubuntu12:2.6-15ubuntu12:2.6-15ubuntu22:2.6-15ubuntu2.1
Show 6 moreShow less
2:2.6-15ubuntu2.22:2.6-15ubuntu2.32:2.6-15ubuntu2.42:2.6-15ubuntu2.52:2.6-15ubuntu2.62:2.6-15ubuntu2.7
2:2.6-15ubuntu2.8
wpa
Ubuntu:20.04:LTS
 before 2:2.9-1ubuntu4.3, plus listed versions
2:2.9-1ubuntu22:2.9-1ubuntu32:2.9-1ubuntu42:2.9-1ubuntu4.12:2.9-1ubuntu4.2
2:2.9-1ubuntu4.3
wpa_supplicant
openSUSE:Leap 15.2
 before 2.9-lp152.8.9.1
2.9-lp152.8.9.1
wpa_supplicant
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
 before 2.9-13.4
2.9-13.4

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-27803 is a high vulnerability (CVSS 7.5) in Debian Linux, published February 26, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 69th percentile. Fixed in wpa_supplicant 2.8-r5.

References

Show 50 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open