Home

CVE-2021-0326

Description

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
13.106

Associated Vulnerability

VulnerabilityOS Platform
client support for WPA and WPA2 (USN-4734-1) hostapd_2.4-0ubuntu6.7_i386.debLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.4-0ubuntu6.7_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.9-1ubuntu4.2_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.9-1ubuntu8.1_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.6-15ubuntu2.7_i386.debLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.6-15ubuntu2.7_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) wpasupplicant_2.4-0ubuntu6.7_i386.debLinux
client support for WPA and WPA2 (USN-4734-1) wpasupplicant_2.4-0ubuntu6.7_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) wpasupplicant_2.9-1ubuntu4.2_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) wpasupplicant_2.9-1ubuntu8.1_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) wpasupplicant_2.6-15ubuntu2.7_i386.debLinux
client support for WPA and WPA2 (USN-4734-1) wpasupplicant_2.6-15ubuntu2.7_amd64.debLinux
SUSE-SU-2021:0477-1(SUSE Linux Enterprise Server 12-SP5 ) wpa_supplicant-2.9-23.6.1.x86_64.rpmLinux
SUSE-SU-2021:0477-1(SUSE Linux Enterprise Server 12-SP5 ) wpa_supplicant-debuginfo-2.9-23.6.1.x86_64.rpmLinux
SUSE-SU-2021:0477-1(SUSE Linux Enterprise Server 12-SP5 ) wpa_supplicant-debugsource-2.9-23.6.1.x86_64.rpmLinux
(RHSA-2021:1686) wpa_supplicant security, bug fix, and enhancement update wpa_supplicant-2.9-5.el8.x86_64.rpmLinux
(RHSA-2021:1686) wpa_supplicant security, bug fix, and enhancement update wpa_supplicant-debugsource-2.9-5.el8.x86_64.rpmLinux
(RHSA-2021:1686)Moderate: security, bug fix, and enhancement update wpa_supplicant-debuginfo-2.9-5.el8.x86_64.rpmLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.9-1ubuntu4.2_amd64.debLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.6-15ubuntu2.7_i386.debLinux
client support for WPA and WPA2 (USN-4734-1) hostapd_2.6-15ubuntu2.7_amd64.debLinux
Wpa_supplicant update (ELSA-2021-1686) wpa_supplicant-2.9-5.el8.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234