Skip to contentW1.fi Wpa Supplicant vulnerabilities
- canonical ltd. wpa supplicantAn issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared...CVE-2024-5290Fix available8.8 High
- debian linux, fedoraproject fedora, redhat enterprise linux +1 more +3 moreThe implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a...CVE-2023-52160Public exploitFix available6.5 Medium
- w1.fi hostapd, fedoraproject fedora, siemens sidis secured smartplug +1 more +3 moreThe implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are...CVE-2022-23304Fix available9.8 Critical
- w1.fi hostapd, fedoraproject fedora, siemens sidis secured smartplug +1 more +3 moreThe implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable...CVE-2022-23303Public exploitFix available9.8 Critical
- w1.fi hostapd, wpa supplicant +1 moreIn wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier...CVE-2021-30004Fix available5.3 Medium
- debian linux, fedoraproject fedora, w1.fi wpa supplicant +2 moreA vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P ...CVE-2021-27803Fix available7.5 High
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morehostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection...CVE-2019-16275Fix available6.5 Medium
- w1.fi hostapd, wpa supplicant +1 moreThe EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer)...CVE-2019-11555Fix available5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +2 more +4 moreAn invalid authentication sequence could result in the hostapd process terminating due to missing state validation stepsCVE-2019-9496Fix available7.5 High
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacksCVE-2019-9494Fix available5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9499Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9498Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +4 more +6 moreThe implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9497Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsCVE-2019-9495Fix available3.7 Low
- canonical ubuntu linux, debian linux, w1.fi wpa supplicant +2 moreAn issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain...CVE-2018-14526Fix available6.5 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13081Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13080Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13079Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13078Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...CVE-2017-13077Fix available6.8 Medium
- w1.fi hostapd, canonical ubuntu linux, w1.fi wpa supplicant +2 morehostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters...CVE-2016-4476Fix available7.5 High
- debian linux, w1.fi wpa supplicant +1 moreThe eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before...CVE-2015-5316Fix available5.9 Medium
- debian linux, w1.fi wpa supplicant +1 moreThe eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not...CVE-2015-5315Fix available5.9 Medium
- debian linux, w1.fi wpa supplicant +1 moreThe eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not...CVE-2015-5314Fix available5.9 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreMultiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant...CVE-2015-8041Fix available5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the...CVE-2015-4146Fix available5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not...CVE-2015-4145Fix available5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not...CVE-2015-4144Fix available5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows...CVE-2015-4143Fix available5.0 Medium
- w1.fi hostapd, opensuse, redhat enterprise linux desktop +4 more +6 moreInteger underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant...CVE-2015-4142Fix available4.3 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreThe WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external...CVE-2015-4141Fix available4.3 Medium
- canonical ubuntu linux, debian linux, opensuse +7 more +9 moreHeap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...CVE-2015-1863Fix available5.8 Medium
- w1.fi wpa supplicantwpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote...CVE-2015-0210Fix available5.9 Medium
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morewpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using...CVE-2014-3686Fix available6.8 Medium