Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-30004

Fixed in a distro release EPSS 2%CVSS 4.3

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

Published 2021-04-02 · CVE record · OSV

Products: w1.fi hostapd, w1.fi wpa_supplicant

Distro releases

ReleasePackageFixed in
Alpine 3.11hostapd2.9-r3
Alpine 3.11wpa_supplicant2.9-r8
Alpine 3.12hostapd2.9-r3
Alpine 3.12wpa_supplicant2.9-r8
Alpine 3.13hostapd2.9-r3
Alpine 3.13wpa_supplicant2.9-r11
Alpine 3.14hostapd2.9-r3
Alpine 3.14wpa_supplicant2.9-r13
Alpine 3.15hostapd2.9-r3
Alpine 3.15wpa_supplicant2.9-r13
Alpine 3.16hostapd2.9-r3
Alpine 3.16wpa_supplicant2.9-r13
Alpine 3.17hostapd2.9-r3
Alpine 3.17wpa_supplicant2.9-r13
Alpine 3.18hostapd2.9-r3
Alpine 3.18wpa_supplicant2.9-r13
Alpine 3.19hostapd2.9-r3
Alpine 3.19wpa_supplicant2.9-r13
Alpine 3.20hostapd2.9-r3
Alpine 3.20wpa_supplicant2.9-r13
Alpine 3.21hostapd2.9-r3
Alpine 3.21wpa_supplicant2.9-r13
Alpine 3.22hostapd2.9-r3
Alpine 3.22wpa_supplicant2.9-r13
Alpine 3.23hostapd2.9-r3
Alpine 3.23wpa_supplicant2.9-r13
Alpine 3.24hostapd2.9-r3
Alpine 3.24wpa_supplicant2.9-r13
Arch Linuxhostapd2.9-5
Arch Linuxwpa_supplicant2:2.10-1
Debian 12wpa2:2.10-1
Debian 13wpa2:2.10-1
Debian 14wpa2:2.10-1
SUSE Linux Enterprise Micro 5.0wpa_supplicant2.9-4.29.1
SUSE Linux Enterprise Module for Basesystem 15 SP2wpa_supplicant2.9-4.29.1
SUSE Linux Enterprise Server 12 SP5wpa_supplicant2.9-23.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5wpa_supplicant2.9-23.12.1
SUSE Package Hub 15 SP2hostapd2.9-bp152.2.3.1
openSUSE Leap 15.2hostapd2.9-lp152.2.3.1
openSUSE Leap 15.2wpa_supplicant2.9-lp152.8.12.1
openSUSE Tumbleweedhostapd2.9-6.2
openSUSE Tumbleweedwpa_supplicant2.9-13.4