WS
Product
Wpa Supplicant
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 19Low 1
Watch
Add Wpa Supplicant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-9499 | 8.1 | Apr 17 | The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and… Affected: through 2.4; 2.5 through 2.7 |
| CVE-2019-9498 | 8.1 | Apr 17 | The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element… Affected: through 2.4; 2.5 through 2.7 |
| CVE-2019-9497 | 8.1 | Apr 17 | The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit Affected: through 2.4; 2.5 through 2.7 |
| CVE-2017-13082 | 8.1 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT)… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2024-5290 | 7.8 | Aug 7 | An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the… Affected: All versions, or not specified |
| CVE-2021-27803 | 7.5 | Feb 26 | A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests Affected: 1.0 before 2.10 |
| CVE-2019-9496 | 7.5 | Apr 17 | An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP… Affected: through 2.7 |
| CVE-2016-4476 | 7.5 | May 9 | hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of… Affected: 0.6.7 through 2.5 |
Showing 8