CVE-2023-52160
Fixed in a distro release EPSS 1%CVSS 6.5
The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.
Products: debian_linux, fedoraproject fedora, redhat enterprise_linux, w1.fi wpa_supplicant
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | wpa_supplicant | 1:2.10-5.el9 |
| Alpine 3.19 | wpa_supplicant | 2.10-r10 |
| Alpine 3.20 | wpa_supplicant | 2.10-r11 |
| Alpine 3.21 | wpa_supplicant | 2.10-r11 |
| Alpine 3.22 | wpa_supplicant | 2.10-r11 |
| Alpine 3.23 | wpa_supplicant | 2.10-r11 |
| Alpine 3.24 | wpa_supplicant | 2.10-r11 |
| Amazon Linux 2 | wpa_supplicant | 1:2.6-12.amzn2.2.3 |
| Debian 10 | wpa | 2:2.7+git20190128+0c1e29f-6+deb10u4 |
| Debian 12 | wpa | 2:2.10-12+deb12u1 |
| Debian 13 | wpa | 2:2.10-21.1 |
| Debian 14 | wpa | 2:2.10-21.1 |
| Red Hat Enterprise Linux 9 | wpa_supplicant | 1:2.10-5.el9 |
| Red Hat Enterprise Linux 9 | wpa_supplicant-debuginfo | 1:2.10-5.el9 |
| Red Hat Enterprise Linux 9 | wpa_supplicant-debugsource | 1:2.10-5.el9 |
| Rocky Linux 9 | wpa_supplicant | 1:2.10-5.el9 |
| SUSE Enterprise Storage 7.1 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Micro 5.1 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Micro 5.2 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Micro 5.3 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Micro 5.4 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Micro 5.5 | wpa_supplicant | 2.10-150500.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | wpa_supplicant | 2.10-150500.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | wpa_supplicant | 2.10-150600.7.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | wpa_supplicant | 2.9-23.20.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | wpa_supplicant | 2.9-23.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Linux Micro 6.0 | wpa_supplicant | 2.10-5.1 |
| SUSE Manager Proxy 4.3 | wpa_supplicant | 2.9-150000.4.39.1 |
| SUSE Manager Server 4.3 | wpa_supplicant | 2.9-150000.4.39.1 |
| Ubuntu 16.04 LTS | wpa | no fix |
| Ubuntu 18.04 LTS | wpa | no fix |
| Ubuntu 20.04 LTS | wpa | no fix |
| Ubuntu 22.04 LTS | wpa | no fix |
| Ubuntu 24.04 LTS | wpa | no fix |
| Ubuntu 25.10 | wpa | no fix |
| Ubuntu 26.04 LTS | wpa | no fix |
| Ubuntu 26.10 | wpa | no fix |
| Ubuntu Pro 14.04 LTS | wpa | no fix |
| openSUSE Leap 15.5 | wpa_supplicant | 2.10-150500.3.3.1 |
| openSUSE Leap 15.6 | wpa_supplicant | 2.10-150600.7.3.1 |
| openSUSE Leap Micro 5.3 | wpa_supplicant | 2.9-150000.4.39.1 |
| openSUSE Leap Micro 5.4 | wpa_supplicant | 2.9-150000.4.39.1 |
| openSUSE Tumbleweed | wpa_supplicant | 2.10-6.1 |