Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0720-1

Опубликовано: 08 мар. 2021
Источник: suse-cvrf

Описание

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
wpa_supplicant-2.9-23.9.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
wpa_supplicant-2.9-23.9.2

Описание

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:wpa_supplicant-2.9-23.9.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5:wpa_supplicant-2.9-23.9.2

Ссылки