USN-6945-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-6945-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6945-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-6945-1

Related

Published

2024-08-06T16:18:20.850958Z

Modified

2024-08-06T16:18:20.850958Z

Summary

wpa vulnerability

Details

Rory McNamara discovered that wpa_supplicant could be made to load arbitrary shared objects by unprivileged users that have access to the control interface. An attacker could use this to escalate privileges to root.

References

Affected packages

Ubuntu:14.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa@2.1-0ubuntu1.7+esm5?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1-0ubuntu1.7+esm5

Affected versions

1.*

1.0-3ubuntu2

1.0-3ubuntu3

1.0-3ubuntu4

2.*

2.1-0ubuntu1

2.1-0ubuntu1.1

2.1-0ubuntu1.2

2.1-0ubuntu1.3

2.1-0ubuntu1.4

2.1-0ubuntu1.5

2.1-0ubuntu1.6

2.1-0ubuntu1.7

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "1:2.1-0ubuntu1.7+esm5",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "1:2.1-0ubuntu1.7+esm5",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2.1-0ubuntu1.7+esm5",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2.1-0ubuntu1.7+esm5",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2.1-0ubuntu1.7+esm5",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2.1-0ubuntu1.7+esm5",
            "binary_name": "wpasupplicant-dbgsym"
        },
        {
            "binary_version": "2.1-0ubuntu1.7+esm5",
            "binary_name": "wpasupplicant-udeb"
        },
        {
            "binary_version": "2.1-0ubuntu1.7+esm5",
            "binary_name": "wpasupplicant-udeb-dbgsym"
        }
    ]
}

Ubuntu:16.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa@2.4-0ubuntu6.8+esm1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4-0ubuntu6.8+esm1

Affected versions

2.*

2.4-0ubuntu3

2.4-0ubuntu4

2.4-0ubuntu5

2.4-0ubuntu6

2.4-0ubuntu6.2

2.4-0ubuntu6.3

2.4-0ubuntu6.4

2.4-0ubuntu6.5

2.4-0ubuntu6.6

2.4-0ubuntu6.7

2.4-0ubuntu6.8

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "1:2.4-0ubuntu6.8+esm1",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "1:2.4-0ubuntu6.8+esm1",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2.4-0ubuntu6.8+esm1",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2.4-0ubuntu6.8+esm1",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2.4-0ubuntu6.8+esm1",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2.4-0ubuntu6.8+esm1",
            "binary_name": "wpasupplicant-dbgsym"
        },
        {
            "binary_version": "2.4-0ubuntu6.8+esm1",
            "binary_name": "wpasupplicant-udeb"
        },
        {
            "binary_version": "2.4-0ubuntu6.8+esm1",
            "binary_name": "wpasupplicant-udeb-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa@2:2.6-15ubuntu2.8+esm1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.6-15ubuntu2.8+esm1

Affected versions

2.*

2.4-0ubuntu10

2:2.*

2:2.4-1.1ubuntu1

2:2.6-15ubuntu1

2:2.6-15ubuntu2

2:2.6-15ubuntu2.1

2:2.6-15ubuntu2.2

2:2.6-15ubuntu2.3

2:2.6-15ubuntu2.4

2:2.6-15ubuntu2.5

2:2.6-15ubuntu2.6

2:2.6-15ubuntu2.7

2:2.6-15ubuntu2.8

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:2.6-15ubuntu2.8+esm1",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "2:2.6-15ubuntu2.8+esm1",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2:2.6-15ubuntu2.8+esm1",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2:2.6-15ubuntu2.8+esm1",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2:2.6-15ubuntu2.8+esm1",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2:2.6-15ubuntu2.8+esm1",
            "binary_name": "wpasupplicant-dbgsym"
        },
        {
            "binary_version": "2:2.6-15ubuntu2.8+esm1",
            "binary_name": "wpasupplicant-udeb"
        }
    ]
}

Ubuntu:20.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa@2:2.9-1ubuntu4.4?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.9-1ubuntu4.4

Affected versions

2:2.*

2:2.9-1ubuntu2

2:2.9-1ubuntu3

2:2.9-1ubuntu4

2:2.9-1ubuntu4.1

2:2.9-1ubuntu4.2

2:2.9-1ubuntu4.3

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:2.9-1ubuntu4.4",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "2:2.9-1ubuntu4.4",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2:2.9-1ubuntu4.4",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2:2.9-1ubuntu4.4",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2:2.9-1ubuntu4.4",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2:2.9-1ubuntu4.4",
            "binary_name": "wpasupplicant-dbgsym"
        },
        {
            "binary_version": "2:2.9-1ubuntu4.4",
            "binary_name": "wpasupplicant-udeb"
        }
    ]
}

Ubuntu:22.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa@2:2.10-6ubuntu2.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.10-6ubuntu2.1

Affected versions

2:2.*

2:2.9.0-21build1

2:2.9.0-23

2:2.10-1

2:2.10-2

2:2.10-6

2:2.10-6ubuntu1

2:2.10-6ubuntu2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "eapoltest"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "eapoltest-dbgsym"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "libwpa-client-dev"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2:2.10-6ubuntu2.1",
            "binary_name": "wpasupplicant-dbgsym"
        }
    ]
}

Ubuntu:24.04:LTS / wpa

Package

Name: wpa
Purl: pkg:deb/ubuntu/wpa@2:2.10-21ubuntu0.1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:2.10-21ubuntu0.1

Affected versions

2:2.*

2:2.10-15

2:2.10-18

2:2.10-20

2:2.10-21

2:2.10-21build2

2:2.10-21build3

2:2.10-21build4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "eapoltest"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "eapoltest-dbgsym"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "hostapd"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "hostapd-dbgsym"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "libwpa-client-dev"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "wpagui"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "wpagui-dbgsym"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "wpasupplicant"
        },
        {
            "binary_version": "2:2.10-21ubuntu0.1",
            "binary_name": "wpasupplicant-dbgsym"
        }
    ]
}