wpa vulnerabilities (Debian)
50 vulnerabilities.
-
wpaDebian An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper... 7.1 High -
wpaDebian In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX... 6.5 Medium -
wpaDebian An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared... 8.8 High -
wpaDebian The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a... 6.5 Medium -
wpaDebian The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are... 9.8 Critical -
wpaDebian The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable... 9.8 Critical -
wpaDebian In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier... 5.3 Medium -
wpaDebian A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P ... 7.5 High -
wpaDebian In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds... 7.5 High -
wpaDebian The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the... 7.5 High -
wpaDebian hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library... 7.5 High -
wpaDebian An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for... 7.4 High -
wpaDebian An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could... 7.4 High -
wpaDebian hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection... 6.5 Medium -
wpaDebian The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are... 5.9 Medium -
wpaDebian The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer)... 5.9 Medium -
wpaDebian An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps 7.5 High -
wpaDebian The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks 5.9 Medium -
wpaDebian The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit 8.1 High -
wpaDebian The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit 8.1 High -
wpaDebian The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit 8.1 High -
wpaDebian The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns 3.7 Low -
wpaDebian hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random()... 7.5 High -
wpaDebian An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain... 6.5 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)... 6.8 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity... 5.3 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group... 5.3 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ... 6.8 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the... 8.1 High -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... 5.3 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... 5.3 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the... 5.3 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)... 5.3 Medium -
wpaDebian Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)... 6.8 Medium -
wpaDebian wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters,... 7.8 High -
wpaDebian hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters... 7.5 High -
wpaDebian The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before... 5.9 Medium -
wpaDebian The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not... 5.9 Medium -
wpaDebian The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not... 5.9 Medium -
wpaDebian The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in... 4.3 Medium -
wpaDebian Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant... 5.0 Medium -
wpaDebian The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the... 5.0 Medium -
wpaDebian The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not... 5.0 Medium -
wpaDebian The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not... 5.0 Medium -
wpaDebian The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows... 5.0 Medium -
wpaDebian Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant... 4.3 Medium -
wpaDebian The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external... 4.3 Medium -
wpaDebian Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a... 5.8 Medium -
wpaDebian wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using... 6.8 Medium -
wpaDebian Heap-based buffer overflow in the eap_server_tls_process_fragment function in... 4.3 Medium