[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2021-27803Date: (C)2021-02-27   (M)2024-04-16


A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 5.4
Exploit Score: 1.6Exploit Score: 5.5
Impact Score: 5.9Impact Score: 6.4
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: ADJACENT_NETWORKAccess Vector: ADJACENT_NETWORK
Attack Complexity: HIGHAccess Complexity: MEDIUM
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: PARTIAL
Scope: UNCHANGEDIntegrity: PARTIAL
Confidentiality: HIGHAvailability: PARTIAL
Integrity: HIGH 
Availability: HIGH 
  
Reference:
DSA-4898
FEDORA-2021-3430f96019
FEDORA-2021-99cad2b81f
FEDORA-2021-9b00febe54
https://lists.debian.org/debian-lts-announce/2021/03/msg00003.html
http://www.openwall.com/lists/oss-security/2021/02/27/1
https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch
https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt
https://www.openwall.com/lists/oss-security/2021/02/25/3

CPE    2
cpe:/o:debian:debian_linux:9.0
cpe:/a:w1.fi:wpa_supplicant
OVAL    18
oval:org.secpod.oval:def:70406
oval:org.secpod.oval:def:70500
oval:org.secpod.oval:def:89044035
oval:org.secpod.oval:def:89044042
...

© SecPod Technologies