Buffer Overflow Affecting wpa_supplicant package, versions *


Severity

Recommended
medium

Based on Red Hat Enterprise Linux security rating.

Threat Intelligence

EPSS
0.27% (68th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL7-WPASUPPLICANT-1400965
  • published26 Jul 2021
  • disclosed4 Feb 2021

Introduced: 4 Feb 2021

CVE-2021-0326  (opens in a new tab)
CWE-120  (opens in a new tab)

How to fix?

There is no fixed version for RHEL:7 wpa_supplicant.

NVD Description

Note: Versions mentioned in the description apply only to the upstream wpa_supplicant package and not the wpa_supplicant package as distributed by RHEL. See How to fix? for RHEL:7 relevant fixed versions and status.

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525

CVSS Scores

version 3.1