Stay Secure with the Latest Linux Advisories

security advisorydenial of servicesecurity issue

Debian Buster DSA-4898-1 Critical: wpa Denial Of Service Advisory

Several vulnerabilities have been discovered in wpa_supplicant and hostapd. CVE-2020-12695 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4898-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso April 22, 2021 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : wpa CVE ID : CVE-2020-12695 CVE-2021-0326 CVE-2021-27803 Debian Bug : 976106 981971 Several vulnerabilities have been discovered in wpa_supplicant and hostapd. CVE-2020-12695 It was discovered that hostapd does not properly handle UPnP subscribe messages under certain conditions, allowing an attacker to cause a denial of service. CVE-2021-0326 It was discovered that wpa_supplicant does not properly process P2P (Wi-Fi Direct) group information from active group owners. An attacker within radio range of the device running P2P could take advantage of this flaw to cause a denial of service or potentially execute arbitrary code. CVE-2021-27803 It was discovered that wpa_supplicant does not properly process P2P (Wi-Fi Direct) provision discovery requests. An attacker within radio range of the device running P2P could take advantage of this flaw to cause a denial of service or potentially execute arbitrary code. For the stable distribution (buster), these problems have been fixed in version 2:2.7+git20190128+0c1e29f-6+deb10u3. We recommend that you upgrade your wpa packages. For the detailed security status of wpa please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/wpa Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance wpacomponents to address numerous security concerns, particularly denial of service flaws, on Debian platforms.. Debian DSA,wpa update,denial of service,hostapd,security advisory. . Severity: Critical. LinuxSecurity.com Team

Apr 22, 2021 •Critical Debian