The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0809 advisory.

    [1:2.9-2.1]
    - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1577:01 advisory.

    * wpa_supplicant: Use-after-free in P2P provision discovery processing (CVE-2021-27803)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the wpa_supplicant package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was discovered in how p2p/p2p_pd.c in     wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct)     provision discovery requests. It could result in denial     of service or other impact (potentially execution of     arbitrary code), for an attacker within radio     range.(CVE-2021-27803)

  - In p2p_copy_client_info of p2p.c, there is a possible     out of bounds write due to a missing bounds check. This     could lead to remote code execution if the target     device is performing a Wi-Fi Direct search, with no     additional execution privileges needed. User     interaction is not needed for exploitation.Product:
    AndroidVersions: Android-10 Android-11 Android-8.1     Android-9Android ID: A-172937525(CVE-2021-0326)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the wpa_supplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi     Direct) provision discovery requests. It could result in denial of service or other impact (potentially     execution of arbitrary code), for an attacker within radio range. (CVE-2021-27803)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wpa_supplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A vulnerability was discovered in how p2p/p2p_pd.c in     wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct)     provision discovery requests. It could result in denial     of service or other impact (potentially execution of     arbitrary code), for an attacker within radio     range.(CVE-2021-27803)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the wpa_supplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A vulnerability was discovered in how p2p/p2p_pd.c in     wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct)     provision discovery requests. It could result in denial     of service or other impact (potentially execution of     arbitrary code), for an attacker within radio     range.(CVE-2021-27803)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0808 advisory.

    The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i /     RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for     client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN     driver.

    Security Fix(es):

    * wpa_supplicant: Use-after-free in P2P provision discovery processing (CVE-2021-27803)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for wpa_supplicant fixes the following issues :

  - CVE-2021-27803: Fixed a P2P provision discovery     processing vulnerability (bsc#1182805).

This update was imported from the SUSE:SLE-15:Update update project.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
147712	Oracle Linux 8 : wpa_supplicant (ELSA-2021-0809)	Nessus	Oracle Linux Local Security Checks	2021/3/11	2024/10/22	high
294756	MiracleLinux 8 : wpa_supplicant-2.9-2.el8.1 (AXSA:2021-1577:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
151176	EulerOS Virtualization for ARM 64 3.0.6.0 : wpa_supplicant (EulerOS-SA-2021-2009)	Nessus	Huawei Local Security Checks	2021/6/30	2023/12/12	high
156488	EulerOS Virtualization 3.0.2.6 : wpa_supplicant (EulerOS-SA-2021-2889)	Nessus	Huawei Local Security Checks	2022/1/6	2022/1/6	high
153345	EulerOS 2.0 SP2 : wpa_supplicant (EulerOS-SA-2021-2439)	Nessus	Huawei Local Security Checks	2021/9/14	2023/11/30	high
149546	EulerOS 2.0 SP5 : wpa_supplicant (EulerOS-SA-2021-1917)	Nessus	Huawei Local Security Checks	2021/5/18	2024/1/1	high
151222	EulerOS Virtualization 3.0.6.6 : wpa_supplicant (EulerOS-SA-2021-2043)	Nessus	Huawei Local Security Checks	2021/7/1	2023/12/11	high
147643	RHEL 7 : wpa_supplicant (RHSA-2021:0808)	Nessus	Red Hat Local Security Checks	2021/3/10	2024/11/7	high
147783	openSUSE Security Update : wpa_supplicant (openSUSE-2021-404)	Nessus	SuSE Local Security Checks	2021/3/15	2024/1/9	high

检测

插件搜索

high

high

high

high

high

high

high

high

high