Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-27803: A flaw was found in the wpa_supplicant, in the way it processes P2P (Wi-Fi Direct) provision discovery requests. This flaw allows an attacker who is within radio range of the device running P2P discovery to cause termination of the wpa_supplicant process or potentially cause code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. 1933361: CVE-2021-27803 wpa_supplicant: Use-after-free in P2P provision discovery processing
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | wpa_supplicant | 1:2.6-12.amzn2.2.1 |
| Amazon Linux · 2 | wpa_supplicant-debuginfo | 1:2.6-12.amzn2.2.1 |
Vulnerabilities 1
-
High 7.5
A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-27803.html