Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0745-1

Опубликовано: 09 мар. 2021
Источник: suse-cvrf

Описание

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2021-27803: P2P provision discovery processing vulnerability (bsc#1182805)

Список пакетов

HPE Helion OpenStack 8
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP2-BCL
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP2-LTSS
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP3-BCL
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP3-LTSS
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP4-LTSS
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
wpa_supplicant-2.6-15.16.1
SUSE OpenStack Cloud 7
wpa_supplicant-2.6-15.16.1
SUSE OpenStack Cloud 8
wpa_supplicant-2.6-15.16.1
SUSE OpenStack Cloud 9
wpa_supplicant-2.6-15.16.1
SUSE OpenStack Cloud Crowbar 8
wpa_supplicant-2.6-15.16.1
SUSE OpenStack Cloud Crowbar 9
wpa_supplicant-2.6-15.16.1

Описание

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.


Затронутые продукты
HPE Helion OpenStack 8:wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP2-BCL:wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP2-LTSS:wpa_supplicant-2.6-15.16.1
SUSE Linux Enterprise Server 12 SP3-BCL:wpa_supplicant-2.6-15.16.1

Ссылки