https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 17:51:50 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2517 <p><strong>Affected:</strong> AlmaLinux:9: wpa_supplicant</p> <p>The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.</p> <p>Security Fix(es):</p> <p>* wpa_supplicant: potential authorization bypass (CVE-2023-52160)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: wpa_supplicant</p> <p>The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.</p> <p>Security Fix(es):</p> <p>* wpa_supplicant: potential authorization bypass (CVE-2023-52160)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:2517 https://cve.radiocsirt.org/vuln/bdu:2024-01426 bdu:2024-01426 https://cve.radiocsirt.org/vuln/bdu:2024-01426 https://cve.radiocsirt.org/vuln/bell-cve-2023-52160 <p><strong>Affected:</strong> Alpaquita:stream: wpa_supplicant</p> <p><strong>Affected:</strong> Alpaquita:stream: wpa_supplicant</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-52160 https://cve.radiocsirt.org/vuln/euvd-2026-259339 EUVD-2026-259339 https://cve.radiocsirt.org/vuln/euvd-2026-259339 https://cve.radiocsirt.org/vuln/fkie_cve-2023-52160 <p>The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network&#39;s TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.</p> <p>The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network&#39;s TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-52160 https://cve.radiocsirt.org/vuln/ghsa-hj6q-jrf5-2pm3 <p>The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network&#39;s TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.</p> <p>The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network&#39;s TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.</p> https://cve.radiocsirt.org/vuln/ghsa-hj6q-jrf5-2pm3 https://cve.radiocsirt.org/vuln/gsd-2023-52160 gsd-2023-52160 https://cve.radiocsirt.org/vuln/gsd-2023-52160 https://cve.radiocsirt.org/vuln/msrc_cve-2023-52160 msrc_CVE-2023-52160 https://cve.radiocsirt.org/vuln/msrc_cve-2023-52160 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13694-1 <p>wpa_supplicant-2.10-6.1 on GA media</p> <p>wpa_supplicant-2.10-6.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13694-1 https://cve.radiocsirt.org/vuln/suse-su-2024:0764-1 <p>Security update for wpa_supplicant</p> <p>Security update for wpa_supplicant</p> https://cve.radiocsirt.org/vuln/suse-su-2024:0764-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52160 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: wpa, Ubuntu:16.04:LTS: wpa, Ubuntu:18.04:LTS: wpa, Ubuntu:20.04:LTS: wpa, Ubuntu:22.04:LTS: wpa, Ubuntu:24.04:LTS: wpa, Ubuntu:25.10: wpa, Ubuntu:26.04:LTS: wpa</p> <p>The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network&#39;s TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: wpa, Ubuntu:16.04:LTS: wpa, Ubuntu:18.04:LTS: wpa, Ubuntu:20.04:LTS: wpa, Ubuntu:22.04:LTS: wpa, Ubuntu:24.04:LTS: wpa, Ubuntu:25.10: wpa, Ubuntu:26.04:LTS: wpa</p> <p>The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network&#39;s TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52160 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0415 <p>Ein anonymer Angreifer im angrenzenden Netzbereich kann eine Schwachstelle in wpa_supplicant ausnutzen, um die Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein anonymer Angreifer im angrenzenden Netzbereich kann eine Schwachstelle in wpa_supplicant ausnutzen, um die Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0415