Wpa Supplicant vulnerabilities

3 known vulnerabilities in Wpa Supplicant from W1.fi. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  wpa_supplicant: Uncontrolled Search Path Element

  CVE-2024-5290Aug 7, 2024Canonical

  An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or a

• 9.8 Critical severity

  SIDIS Secured SmartPlug: Observable Discrepancy

  CVE-2022-23304Jan 17, 2022SiemensEPSS 2.05%

  The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.

• 9.8 Critical severity

  SIDIS Secured SmartPlug: Observable Discrepancy

  CVE-2022-23303Jan 17, 2022SiemensEPSS 3.28%

  The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.