Summary
Rory McNamara discovered that wpa_supplicant could be made to load
arbitrary shared objects by unprivileged users that have access to
the control interface. An attacker could use this to escalate privileges
to root.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | wpa | 2.1-0ubuntu1.7+esm5 |
| Ubuntu · 16.04 LTS 16.04:LTS | wpa | 2.4-0ubuntu6.8+esm1 |
| Ubuntu · 18.04 LTS 18.04:LTS | wpa | 2:2.6-15ubuntu2.8+esm1 |
| Ubuntu · 20.04 LTS 20.04:LTS | wpa | 2:2.9-1ubuntu4.4 |
| Ubuntu · 22.04 LTS 22.04:LTS | wpa | 2:2.10-6ubuntu2.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | wpa | 2:2.10-21ubuntu0.1 |
Vulnerabilities 1
-
High 8.8
An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a l…