Files
poky/meta/recipes-connectivity
Stefan Ghinea eceb7357a6 wpa-supplicant: fix CVE-2021-0326
In p2p_copy_client_info of p2p.c, there is a possible out of bounds write
due to a missing bounds check. This could lead to remote code execution
if the target device is performing a Wi-Fi Direct search, with no
additional execution privileges needed. User interaction is not needed
for exploitation.Product: AndroidVersions: Android-10 Android-11
Android-8.1 Android-9 Android ID: A-172937525

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-0326

Upstream patches:
https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e<links_for_CVE_patches>

(From OE-Core rev: b7940edabe100512e8f558cc37f9da836feae74d)

Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26 15:21:20 +00:00
..
2020-07-12 12:21:48 +01:00
2021-02-09 08:56:10 +00:00
2020-10-31 08:54:12 +00:00
2020-12-31 11:56:41 +00:00
2021-02-08 14:47:16 +00:00
2020-11-03 08:21:11 +00:00
2020-12-30 14:01:06 +00:00
2019-12-28 23:25:42 +00:00
2021-01-16 22:39:35 +00:00
2021-02-18 23:40:00 +00:00
2019-11-04 13:39:05 +00:00
2021-02-23 22:35:00 +00:00
2021-01-09 09:09:50 +00:00
2021-01-23 17:08:54 +00:00