CVE catalog

CVE-2021-0326

wpa affected and fixed versions

[CVE catalog]

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525

Severity
High · CVSS 7.5CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.93% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixiewpa2:2.10-24Fixed[CVE-2021-0326]
Debiantrixiewpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]
Debiansidwpa2:2.11-4Fixed[CVE-2021-0326]
Debiansidwpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]
Debianforkywpa2:2.11-4Fixed[CVE-2021-0326]
Debianforkywpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]
Debianbookworm-securitywpa2:2.10-12+deb12u2Fixed[CVE-2021-0326]
Debianbookwormwpa2:2.10-12+deb12u3Fixed[CVE-2021-0326]
Debianbookwormwpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]

Showing 9 fix observations. All 83 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
AndroidRelease not reportedplatform/external/wpa_supplicant_811UnknownSource applicability is not established[ASB-A-172937525]
AndroidRelease not reportedplatform/external/wpa_supplicant_811:2021-02-01UnknownSource applicability is not established[ASB-A-172937525]
Alpine3.10wpa_supplicant2.8-r4UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.11wpa_supplicant2.9-r6UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.12wpa_supplicant2.9-r6UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.13wpa_supplicant2.9-r9UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.14wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.15wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.16wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.17wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.18wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.19wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.20wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.21wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.22wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.23wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Alpine3.24wpa_supplicant2.9-r10UnknownSource applicability is not established[ALPINE-CVE-2021-0326]
Debianbookwormwpa2:2.10-12+deb12u3Fixed[CVE-2021-0326]
Debianbookwormwpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]
Debianbookworm-securitywpa2:2.10-12+deb12u2Fixed[CVE-2021-0326]
Debianforkywpa2:2.11-4Fixed[CVE-2021-0326]
Debianforkywpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]
Debiansidwpa2:2.11-4Fixed[CVE-2021-0326]
Debiansidwpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]
Debiantrixiewpa2:2.10-24Fixed[CVE-2021-0326]
Debiantrixiewpa2:2.9.0-17FixedDistribution-reported fixed boundary[CVE-2021-0326]
Opensuseleap 15.2wpa_supplicant2.9-lp152.8.6.1UnknownSource applicability is not established[OPENSUSE-SU-2021:0284-1]
Suseenterprise storage 6wpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise high performance computing 15 sp1-esposwpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise high performance computing 15 sp1-ltsswpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise high performance computing 15-esposwpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise high performance computing 15-ltsswpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise module for basesystem 15 sp2wpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise server 12 sp5wpa_supplicant2.9-23.6.1UnknownSource applicability is not established[SUSE-SU-2021:0477-1]
Suselinux enterprise server 15 sp1-bclwpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise server 15 sp1-ltsswpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise server 15-ltsswpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise server for sap applications 12 sp5wpa_supplicant2.9-23.6.1UnknownSource applicability is not established[SUSE-SU-2021:0477-1]
Suselinux enterprise server for sap applications 15wpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Suselinux enterprise server for sap applications 15 sp1wpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Susemanager proxy 4.0wpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Susemanager retail branch server 4.0wpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Susemanager server 4.0wpa_supplicant2.9-4.23.1UnknownSource applicability is not established[SUSE-SU-2021:0443-1]
Ubuntu16.04wpa2.4-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu6.2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu6.3UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu6.4UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu6.5UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu6.6UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu16.04wpa2.4-0ubuntu6.7UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2.4-0ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.4-1.1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2.1UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2.2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2.3UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2.4UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2.5UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2.6UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu18.04wpa2:2.6-15ubuntu2.7UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu20.04wpa2:2.9-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu20.04wpa2:2.9-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu20.04wpa2:2.9-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu20.04wpa2:2.9-1ubuntu4.1UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntu20.04wpa2:2.9-1ubuntu4.2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa1.0-3ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa1.0-3ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa1.0-3ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.1UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.3UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.4UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.5UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.6UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.7UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.7+esm1UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.7+esm2UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Ubuntuprowpa2.1-0ubuntu1.7+esm3UnknownSource applicability is not established[UBUNTU-CVE-2021-0326]
Original provider fields
{
  "package_releases": [
    {
      "name": "wpa",
      "status": "fixed",
      "release": "sid",
      "version": "2:2.11-4"
    },
    {
      "name": "wpa",
      "status": "fixed",
      "release": "forky",
      "version": "2:2.11-4"
    },
    {
      "name": "wpa",
      "status": "fixed",
      "release": "trixie",
      "version": "2:2.10-24"
    },
    {
      "name": "wpa",
      "status": "fixed",
      "release": "bookworm",
      "version": "2:2.10-12+deb12u3"
    },
    {
      "name": "wpa",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2:2.10-12+deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": 981971,
      "name": "wpa",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2:2.9.0-17"
    },
    {
      "bug": 981971,
      "name": "wpa",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2:2.9.0-17"
    },
    {
      "bug": 981971,
      "name": "wpa",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2:2.9.0-17"
    },
    {
      "bug": 981971,
      "name": "wpa",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2:2.9.0-17"
    }
  ],
  "distribution_packages": [
    {
      "name": "platform/external/wpa_supplicant_8",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "11:0"
            },
            {
              "fixed": "11:2021-02-01"
            }
          ]
        }
      ],
      "versions": [
        "11"
      ],
      "ecosystem": "Android",
      "provider_url": "https://osv.dev/vulnerability/ASB-A-172937525",
      "fixed_version": "11:2021-02-01",
      "provider_source": "pypi",
      "provider_record_id": "ASB-A-172937525",
      "provider_updated_at": "2026-10-16T15:49:48.318845306Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8-r4"
            }
          ]
        }
      ],
      "release": "3.10",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.8-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r6"
            }
          ]
        }
      ],
      "release": "3.11",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r6",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r6"
            }
          ]
        }
      ],
      "release": "3.12",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r6",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r9"
            }
          ]
        }
      ],
      "release": "3.13",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r9",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.14",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-r10"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-0326",
      "fixed_version": "2.9-r10",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2021-0326",
      "provider_updated_at": "2026-10-23T17:17:56.134060066Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "manager server 4.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-4.23.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0443-1",
      "fixed_version": "2.9-4.23.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0443-1",
      "provider_updated_at": "2026-02-04T04:13:53.744058Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-lp152.8.6.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:0284-1",
      "fixed_version": "2.9-lp152.8.6.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:0284-1",
      "provider_updated_at": "2026-02-04T03:38:43.033435Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.1-0ubuntu1.7+esm3"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1.0-3ubuntu2",
        "1.0-3ubuntu3",
        "1.0-3ubuntu4",
        "2.1-0ubuntu1",
        "2.1-0ubuntu1.1",
        "2.1-0ubuntu1.2",
        "2.1-0ubuntu1.3",
        "2.1-0ubuntu1.4",
        "2.1-0ubuntu1.5",
        "2.1-0ubuntu1.6",
        "2.1-0ubuntu1.7",
        "2.1-0ubuntu1.7+esm1",
        "2.1-0ubuntu1.7+esm2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-0326",
      "fixed_version": "2.1-0ubuntu1.7+esm3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-0326",
      "provider_updated_at": "2026-02-04T03:20:39.013126Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4-0ubuntu6.7"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "2.4-0ubuntu3",
        "2.4-0ubuntu4",
        "2.4-0ubuntu5",
        "2.4-0ubuntu6",
        "2.4-0ubuntu6.2",
        "2.4-0ubuntu6.3",
        "2.4-0ubuntu6.4",
        "2.4-0ubuntu6.5",
        "2.4-0ubuntu6.6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-0326",
      "fixed_version": "2.4-0ubuntu6.7",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-0326",
      "provider_updated_at": "2026-02-04T03:20:39.013126Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:2.6-15ubuntu2.7"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.4-0ubuntu10",
        "2:2.4-1.1ubuntu1",
        "2:2.6-15ubuntu1",
        "2:2.6-15ubuntu2",
        "2:2.6-15ubuntu2.1",
        "2:2.6-15ubuntu2.2",
        "2:2.6-15ubuntu2.3",
        "2:2.6-15ubuntu2.4",
        "2:2.6-15ubuntu2.5",
        "2:2.6-15ubuntu2.6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-0326",
      "fixed_version": "2:2.6-15ubuntu2.7",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-0326",
      "provider_updated_at": "2026-02-04T03:20:39.013126Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:2.9-1ubuntu4.2"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2:2.9-1ubuntu2",
        "2:2.9-1ubuntu3",
        "2:2.9-1ubuntu4",
        "2:2.9-1ubuntu4.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-0326",
      "fixed_version": "2:2.9-1ubuntu4.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-0326",
      "provider_updated_at": "2026-02-04T03:20:39.013126Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-23.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0477-1",
      "fixed_version": "2.9-23.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0477-1",
      "provider_updated_at": "2025-05-02T04:10:27.960439Z",
      "applicability_unknown": true
    },
    {
      "name": "wpa_supplicant",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.9-23.6.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:0477-1",
      "fixed_version": "2.9-23.6.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:0477-1",
      "provider_updated_at": "2025-05-02T04:10:27.960439Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #981971]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [eapoltest]Unknown

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [hostapd]Unknown

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [libwpa-client-dev]Unknown

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [wpagui]Unknown

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

  • [wpasupplicant]Unknown

    Source package: [wpa]

    Details (4)

    • 2:2.10-12+deb12u3 · amd64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u3 · arm64 · bookworm

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

    • 2:2.10-12+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · bookworm; dsa · wpa · debian · 12

[Debian 13 (Trixie)]

  • [eapoltest]Unknown

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

  • [hostapd]Unknown

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

  • [libwpa-client-dev]Unknown

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

  • [wpagui]Unknown

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

  • [wpasupplicant]Unknown

    Source package: [wpa]

    Details (2)

    • 2:2.10-24 · amd64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

    • 2:2.10-24 · arm64 · trixie

      Fixed · Fixed: 2:2.9.0-17

      dsa · wpa · debian · 13

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]