| Name | CVE-2021-0326 |
| Description | In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525 |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-2572-1, DSA-4898-1, ELA-370-1 |
| Debian Bugs | 981971 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| wpa (PTS) | jessie, jessie (lts) | 2.3-1+deb8u14 | fixed |
| stretch (security) | 2:2.4-1+deb9u9 | fixed | |
| stretch (lts), stretch | 2:2.4-1+deb9u10 | fixed | |
| buster | 2:2.7+git20190128+0c1e29f-6+deb10u3 | fixed | |
| buster (security) | 2:2.7+git20190128+0c1e29f-6+deb10u4 | fixed | |
| bullseye | 2:2.9.0-21 | fixed | |
| bookworm | 2:2.10-12 | fixed | |
| trixie, sid | 2:2.10-21 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| wpa | source | jessie | 2.3-1+deb8u12 | ELA-370-1 | ||
| wpa | source | stretch | 2:2.4-1+deb9u8 | DLA-2572-1 | ||
| wpa | source | buster | 2:2.7+git20190128+0c1e29f-6+deb10u3 | DSA-4898-1 | ||
| wpa | source | (unstable) | 2:2.9.0-17 | 981971 |
https://www.openwall.com/lists/oss-security/2021/02/03/4
https://w1.fi/security/2020-2/wpa_supplicant-p2p-group-info-processing-vulnerability.txt
https://w1.fi/security/2020-2/0001-P2P-Fix-copying-of-secondary-device-types-for-P2P-gr.patch
https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e