Known vulnerabilities in wpa_supplicant

Software CPE: cpe:2.3:a:jouni_malinen:wpa_supplicant:*:*:*:*:*:*:*:*
Total vulnerabilities: 22
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting wpa_supplicant wpa_supplicant is affected by 22 known vulnerabilities: 3 high, 11 medium, 8 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86768 - Improper Authentication
CVE-2023-52160
CWE-287 Medium
Available
No
- 23.02.2024 SB2024022343
SB2024022345
SB2024022346
and 11 more
#VU59839 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23303
CWE-327 Low
No
No
2.10 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 10 more
#VU59838 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23304
CWE-327 Low
No
No
2.10 19.01.2022 SB2022011930
SB2022011945
SB2022021835
and 8 more
#VU59106 - Improper input validation
CVE-2021-30004
CWE-20 Medium
No
No
2.10 29.12.2021 SB2021040206
SB2021040207
SB2021122905
and 6 more
#VU59105 - Use After Free
CVE-2021-0535
CWE-416 Low
No
No
2.10 29.12.2021 SB2021062231
SB2021122905
#VU59104 - Out-of-bounds write
CVE-2021-0326
CWE-787 Medium
Available
No
2.10 29.12.2021 SB2021021023
SB2021122905
SB2021021138
and 9 more
#VU55968 - Resource Management Errors
CVE-2021-27803
CWE-399 Medium
No
No
2.10 18.08.2021 SB2021022708
SB2021081815
SB2021122905
and 15 more
#VU23964 - Permissions, Privileges, and Access Controls
CVE-2019-9499
CWE-264 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041736
and 6 more
#VU23963 - Permissions, Privileges, and Access Controls
CVE-2019-9498
CWE-264 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041735
and 7 more
#VU23962 - Improper Authentication
CVE-2019-9497
CWE-287 High
No
No
2.8 06.01.2020 SB2019041715
SB2020021601
SB2019041734
and 7 more
#VU23960 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-9495
CWE-327 Low
No
No
2.8 06.01.2020 SB2019041715
SB2020010605
SB2020021601
and 8 more
#VU23959 - Exposure of sensitive information to an unauthorized actor
CVE-2019-9494
CWE-200 Medium
No
No
2.8 06.01.2020 SB2019041715
SB2020010605
SB2020021601
and 10 more
#VU14295 - Improper input validation
CVE-2018-14526
CWE-20 Low
No
No
- 09.08.2018 SB2018080908
SB2018081504
SB2018102903
and 8 more
#VU11270 - Buffer Access with Incorrect Length Value
CVE-2015-5315
CWE-805 Low
No
No
- 26.03.2018 SB2015111002
SB2015112002
#VU11269 - NULL Pointer Dereference
CVE-2015-5316
CWE-476 Low
No
No
- 26.03.2018 SB2015111002
#VU9591 - Permissions, Privileges, and Access Controls
CVE-2017-13080
CWE-264 Low
No
No
- 08.12.2017 SB2017101724
SB2017101630
SB2017101631
and 13 more
#VU40715 - Improper input validation
CVE-2015-4146
CWE-20 Medium
No
No
- 15.06.2015 SB2015061513
SB2016062710
#VU40716 - Resource Management Errors
CVE-2015-4145
CWE-399 Medium
No
No
- 15.06.2015 SB2015061514
SB2017102805
SB2016062710
#VU40717 - Memory corruption
CVE-2015-4144
CWE-119 Medium
No
No
- 15.06.2015 SB2015061515
SB2017102805
SB2016062710
#VU40718 - Memory corruption
CVE-2015-4143
CWE-119 Medium
No
No
- 15.06.2015 SB2015061513
SB2017102805
SB2016062710


Showing elements 1 - 20 out of 22