{"id":"CVE-2021-30004","aliases":["ALPINE-CVE-2021-30004","AZL-6974","BELL-CVE-2021-30004","DEBIAN-CVE-2021-30004","EUVD-2021-16948","GHSA-mwxw-68wg-34jm","MGASA-2021-0254","SUSE-SU-2021:1125-1","SUSE-SU-2021:1166-1","openSUSE-SU-2021:0519-1","openSUSE-SU-2021:0545-1","openSUSE-SU-2021:0563-1","openSUSE-SU-2024:10846-1","openSUSE-SU-2024:11515-1"],"status":"published","title":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier...","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01637,"percentile":0.76498,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2021-04-02T00:00:00Z","modified":"2026-10-23T18:02:52Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"hostapd","fixed_in":["2.9-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"wpa_supplicant","fixed_in":["2.9-r8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"wpa_supplicant","fixed_in":["2.9-r8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"wpa_supplicant","fixed_in":["2.9-r11"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wpa_supplicant","fixed_in":["2.9-r13"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"wpa_supplicant","fixed_in":["2.9-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wpa","fixed_in":["2:2.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpa","fixed_in":["2:2.10-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpa","fixed_in":["2:2.10-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"wpa_supplicant","fixed_in":["2.9-1.5.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"hostapd","fixed_in":["2.9-1.3.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"wpa_supplicant","fixed_in":["2.9-8.2.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"hostapd","fixed_in":["2.9-5.1.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"wpa_supplicant","fixed_in":["2.9-4.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"wpa_supplicant","fixed_in":["2.9-4.29.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"wpa_supplicant","fixed_in":["2.9-lp152.8.12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r11"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-r13"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-1.5.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-1.3.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-8.2.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-5.1.mga8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-4.29.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-lp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-bp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-lp152.8.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-6.2"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-13.4"}]}],"bundled":16}],"products":[{"vendor":"w1.fi","product":"hostapd"},{"vendor":"w1.fi","product":"wpa_supplicant"}],"references":[{"url":"https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15","tags":["x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202309-16","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30004","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mwxw-68wg-34jm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-30004","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-30004","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-30004","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0254.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29046","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXT3Y5NEGCCPGZ7FTYURPUBTHNNJA6MF/","tags":["web","advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4XPNZHCXJ32COQGQ62HNGD6DHPO5E552/","tags":["web","advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211125-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184348","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30004","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211166-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1150934","tags":["report"]},{"url":"https://bugzilla.suse.com/1172700","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12695","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7GHTARPJSUMITH7M3ESWRIZUIYW5UAM6/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-0326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27803","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-30004","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2021-04-02T00:00:00Z","modified":"2026-07-07T18:29:25.266Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:02.20241Z"}],"euvd":[{"id":"EUVD-2021-16948","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2021-04-02T00:00:00Z","modified":"2026-07-07T18:29:25Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:11.442824Z"}],"ghsa":[{"id":"GHSA-mwxw-68wg-34jm","title":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier...","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2022-05-24T17:46:27Z","modified":"2023-09-30T12:30:15Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:54:46.99514Z"}],"nvd":[{"id":"CVE-2021-30004","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2021-04-02T05:15:13.313Z","modified":"2026-07-07T19:16:47.327Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:51.197859Z"}],"osv":[{"id":"ALPINE-CVE-2021-30004","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2021-04-02T05:15:13.313Z","modified":"2026-10-23T17:17:56.182074161Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6974","title":"CVE-2021-30004 affecting package wpa_supplicant for versions less than 2.9-4","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2021-04-02T05:15:13Z","modified":"2026-04-21T04:36:14.205898Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"BELL-CVE-2021-30004","title":"CVE-2021-30004 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:13.701861Z","modified":"2026-01-26T09:46:46.545849Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-30004","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2021-04-02T05:15:13.313Z","modified":"2026-10-20T10:54:39.01792009Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:19.483607Z"},{"id":"DEBIAN-CVE-2021-30004","description":"In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.","status":"published","published":"2021-04-02T05:15:13.313Z","modified":"2026-10-23T18:02:52.054289681Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.94143Z"},{"id":"MGASA-2021-0254","title":"Updated wpa_supplicant, hostapd packages fix security vulnerability","description":"The wpa_supplicant and hostapd packages are updated to fix a forging attacks\nthat may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. (CVE-2021-30004).\n","status":"published","published":"2021-06-13T21:32:39Z","modified":"2026-04-16T04:42:59.780250491Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0519-1","title":"Security update for hostapd","description":"This update for hostapd fixes the following issues:\n\n- CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348)\n- CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (boo#1172700)\n- CVE-2019-16275: AP mode PMF disconnection protection bypass (boo#1150934) \n\n- added AppArmor profile (source apparmor-usr.sbin.hostapd)\n","status":"published","published":"2021-04-08T22:41:46Z","modified":"2026-02-04T02:18:22.076453Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0545-1","title":"Security update for hostapd","description":"This update for hostapd fixes the following issues:\n\n- CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348)\n- CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP (boo#1172700)\n- CVE-2019-16275: AP mode PMF disconnection protection bypass (boo#1150934) \n\n- added AppArmor profile (source apparmor-usr.sbin.hostapd)\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2021-04-12T10:05:09Z","modified":"2026-02-04T03:10:43.543558Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0563-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier \n  parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-04-16T18:05:36Z","modified":"2026-02-04T03:54:32.144539Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10846-1","title":"hostapd-2.9-6.2 on GA media","description":"These are all security issues fixed in the hostapd-2.9-6.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:11:09.020358Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11515-1","title":"wpa_supplicant-2.9-13.4 on GA media","description":"These are all security issues fixed in the wpa_supplicant-2.9-13.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:01:24.837626Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:1125-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier \n  parameters were mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348)\n","status":"published","published":"2021-04-09T13:51:15Z","modified":"2026-02-04T03:11:26.624588Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1166-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier \n  parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348).\n","status":"published","published":"2021-04-13T12:04:03Z","modified":"2025-05-02T04:31:23.766962Z","updated_at":"2026-11-02T15:53:49.138643Z"}]}}