Skip to content
OpenAdvisories
High ALAS2-2021-1624 1 CVE

Important: wpa_supplicant security update (Amazon Linux 2)

Published Mar 25, 2021 · Updated Mar 25, 2021

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-27803: A flaw was found in the wpa_supplicant, in the way it processes P2P (Wi-Fi Direct) provision discovery requests. This flaw allows an attacker who is within radio range of the device running P2P discovery to cause termination of the wpa_supplicant process or potentially cause code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. 1933361: CVE-2021-27803 wpa_supplicant: Use-after-free in P2P provision discovery processing

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 wpa_supplicant 1:2.6-12.amzn2.2.1
Amazon Linux · 2 wpa_supplicant-debuginfo 1:2.6-12.amzn2.2.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-27803.html