MGASA-2021-0095

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0095.html

Import Source

https://advisories.mageia.org/MGASA-2021-0095.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2021-0095

Related

CVE-2021-27803

Published

2021-03-02T22:33:06Z

Modified

2021-03-02T21:41:07Z

Summary

Updated wpa_supplicant packages fix security vulnerability

Details

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range (CVE-2021-27803).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:8 / wpa_supplicant

Package

Name: wpa_supplicant
Purl: pkg:rpm/mageia/wpa_supplicant?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.9-8.1.mga8

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / wpa_supplicant

Package

Name: wpa_supplicant
Purl: pkg:rpm/mageia/wpa_supplicant?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.9-1.4.mga7

Ecosystem specific

{
    "section": "core"
}