According to the versions of the wpa_supplicant package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was discovered in how p2p/p2p_pd.c in     wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct)     provision discovery requests. It could result in denial     of service or other impact (potentially execution of     arbitrary code), for an attacker within radio     range.(CVE-2021-27803)

  - In p2p_copy_client_info of p2p.c, there is a possible     out of bounds write due to a missing bounds check. This     could lead to remote code execution if the target     device is performing a Wi-Fi Direct search, with no     additional execution privileges needed. User     interaction is not needed for exploitation.Product:
    AndroidVersions: Android-10 Android-11 Android-8.1     Android-9Android ID: A-172937525(CVE-2021-0326)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in wpa_supplicant and hostapd.

  - CVE-2020-12695     It was discovered that hostapd does not properly handle     UPnP subscribe messages under certain conditions,     allowing an attacker to cause a denial of service.

  - CVE-2021-0326     It was discovered that wpa_supplicant does not properly     process P2P (Wi-Fi Direct) group information from active     group owners. An attacker within radio range of the     device running P2P could take advantage of this flaw to     cause a denial of service or potentially execute     arbitrary code.

  - CVE-2021-27803     It was discovered that wpa_supplicant does not properly     process P2P (Wi-Fi Direct) provision discovery requests.
    An attacker within radio range of the device running P2P     could take advantage of this flaw to cause a denial of     service or potentially execute arbitrary code.

The version of wpa_supplicant installed on the remote host is prior to 2.6-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1624 advisory.

    A flaw was found in the wpa_supplicant, in the way it processes P2P (Wi-Fi Direct) provision discovery     requests. This flaw allows an attacker who is within radio range of the device running P2P discovery to     cause termination of the wpa_supplicant process or potentially cause code execution. The highest threat     from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-27803)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0808 advisory.

    [1:2.6-12.1.0.2]
    - Added undefine-bitwise-in-common-header.patch [bug 27677154]

    [1:2.6-12.1]
    - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0809 advisory.

    [1:2.9-2.1]
    - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the wpa_supplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A vulnerability was discovered in how p2p/p2p_pd.c in     wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct)     provision discovery requests. It could result in denial     of service or other impact (potentially execution of     arbitrary code), for an attacker within radio     range.(CVE-2021-27803)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wpa_supplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A vulnerability was discovered in how p2p/p2p_pd.c in     wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct)     provision discovery requests. It could result in denial     of service or other impact (potentially execution of     arbitrary code), for an attacker within radio     range.(CVE-2021-27803)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the wpa_supplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi     Direct) provision discovery requests. It could result in denial of service or other impact (potentially     execution of arbitrary code), for an attacker within radio range. (CVE-2021-27803)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0808 advisory.

    The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i /     RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for     client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN     driver.

    Security Fix(es):

    * wpa_supplicant: Use-after-free in P2P provision discovery processing (CVE-2021-27803)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for wpa_supplicant fixes the following issues :

  - CVE-2021-27803: Fixed a P2P provision discovery     processing vulnerability (bsc#1182805).

This update was imported from the SUSE:SLE-15:Update update project.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
151176	EulerOS Virtualization for ARM 64 3.0.6.0 : wpa_supplicant (EulerOS-SA-2021-2009)	Nessus	Huawei Local Security Checks	2021/6/30	2023/12/12	high
148967	Debian DSA-4898-1 : wpa - security update	Nessus	Debian Local Security Checks	2021/4/23	2024/1/16	high
148194	Amazon Linux 2 : wpa_supplicant (ALAS-2021-1624)	Nessus	Amazon Linux Local Security Checks	2021/3/27	2024/12/11	high
147656	Oracle Linux 7 : wpa_supplicant (ELSA-2021-0808)	Nessus	Oracle Linux Local Security Checks	2021/3/11	2024/11/1	high
147712	Oracle Linux 8 : wpa_supplicant (ELSA-2021-0809)	Nessus	Oracle Linux Local Security Checks	2021/3/11	2024/10/22	high
149546	EulerOS 2.0 SP5 : wpa_supplicant (EulerOS-SA-2021-1917)	Nessus	Huawei Local Security Checks	2021/5/18	2024/1/1	high
151222	EulerOS Virtualization 3.0.6.6 : wpa_supplicant (EulerOS-SA-2021-2043)	Nessus	Huawei Local Security Checks	2021/7/1	2023/12/11	high
153345	EulerOS 2.0 SP2 : wpa_supplicant (EulerOS-SA-2021-2439)	Nessus	Huawei Local Security Checks	2021/9/14	2023/11/30	high
156488	EulerOS Virtualization 3.0.2.6 : wpa_supplicant (EulerOS-SA-2021-2889)	Nessus	Huawei Local Security Checks	2022/1/6	2022/1/6	high
147643	RHEL 7 : wpa_supplicant (RHSA-2021:0808)	Nessus	Red Hat Local Security Checks	2021/3/10	2024/11/7	high
147783	openSUSE Security Update : wpa_supplicant (openSUSE-2021-404)	Nessus	SuSE Local Security Checks	2021/3/15	2024/1/9	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high