Debian/wpa: high 7.8
wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause
Action: Upgrade wpa to 2.3-2.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3-2.4 | - |
Fixed versions
| 2.3-2.4 |
Sources
published · modified · JSON