WS
Product
Wpa Supplicant
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 19Low 1
Watch
Add Wpa Supplicant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-13086 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13084 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13077 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2023-52160 | 6.5 | Feb 22 | The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass Affected: through 2.10 |
| CVE-2019-16275 | 6.5 | Sep 12 | hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled Affected: through 2.9 |
| CVE-2018-14526 | 6.5 | Aug 8 | An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6 Affected: 2.0 through 2.6 |
| CVE-2019-11555 | 5.9 | Apr 26 | The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where… Affected: before 2.8 |
| CVE-2019-9494 | 5.9 | Apr 17 | The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns Affected: through 2.7 |
| CVE-2015-5316 | 5.9 | Feb 21 | The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote… Affected: 2.0 before 2.6 |
| CVE-2015-5315 | 5.9 | Feb 21 | The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when… Affected: 2.0 before 2.6 |
| CVE-2015-5314 | 5.9 | Feb 21 | The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used… Affected: 2.0 before 2.6 |
| CVE-2015-0210 | 5.9 | Aug 28 | wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack Affected: 2.0-16 |
| CVE-2021-30004 | 5.3 | Apr 2 | In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c Affected: 2.9 |
| CVE-2017-13088 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13087 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13081 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13080 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13079 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.3.7; +27 more |
Showing 19