wpasupplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SETCRED, or (3) SET_NETWORK command.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1:2.1-0ubuntu1.5", "binary_name": "hostapd" }, { "binary_version": "1:2.1-0ubuntu1.5", "binary_name": "hostapd-dbgsym" }, { "binary_version": "2.1-0ubuntu1.5", "binary_name": "wpagui" }, { "binary_version": "2.1-0ubuntu1.5", "binary_name": "wpagui-dbgsym" }, { "binary_version": "2.1-0ubuntu1.5", "binary_name": "wpasupplicant" }, { "binary_version": "2.1-0ubuntu1.5", "binary_name": "wpasupplicant-dbgsym" }, { "binary_version": "2.1-0ubuntu1.5", "binary_name": "wpasupplicant-udeb" }, { "binary_version": "2.1-0ubuntu1.5", "binary_name": "wpasupplicant-udeb-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1:2.4-0ubuntu6.2", "binary_name": "hostapd" }, { "binary_version": "1:2.4-0ubuntu6.2", "binary_name": "hostapd-dbgsym" }, { "binary_version": "2.4-0ubuntu6.2", "binary_name": "wpagui" }, { "binary_version": "2.4-0ubuntu6.2", "binary_name": "wpagui-dbgsym" }, { "binary_version": "2.4-0ubuntu6.2", "binary_name": "wpasupplicant" }, { "binary_version": "2.4-0ubuntu6.2", "binary_name": "wpasupplicant-dbgsym" }, { "binary_version": "2.4-0ubuntu6.2", "binary_name": "wpasupplicant-udeb" }, { "binary_version": "2.4-0ubuntu6.2", "binary_name": "wpasupplicant-udeb-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1:2.4-0ubuntu10", "binary_name": "hostapd" }, { "binary_version": "1:2.4-0ubuntu10", "binary_name": "hostapd-dbgsym" }, { "binary_version": "2.4-0ubuntu10", "binary_name": "wpagui" }, { "binary_version": "2.4-0ubuntu10", "binary_name": "wpagui-dbgsym" }, { "binary_version": "2.4-0ubuntu10", "binary_name": "wpasupplicant" }, { "binary_version": "2.4-0ubuntu10", "binary_name": "wpasupplicant-dbgsym" }, { "binary_version": "2.4-0ubuntu10", "binary_name": "wpasupplicant-udeb" } ] }