Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-0326: In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525 1925152: CVE-2021-0326 wpa_supplicant: P2P group information processing vulnerability
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | wpa_supplicant | 1:2.6-12.amzn2.2.2 |
| Amazon Linux · 2 | wpa_supplicant-debuginfo | 1:2.6-12.amzn2.2.2 |
Vulnerabilities 1
-
Unscored —CVE-2021-0326 Public exploit
In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lea…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-0326.html