VDB

DEBIAN-CVE-2021-30004

DEBIAN-CVE-2021-30004 PUBLISHED CVSS 5.300000190734863 MEDIUM

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

Risk Scores

CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
Debian:11wpa*, 2.9.0+git20211116, 2.9.0-21
Debian:14wpa2:2.11-1, 2:2.10-25, 2:2.10-24
Debian:13wpa2.10-24, 2.10-25, 2.11-1
Debian:12wpa2.10-24, 2.10-25, 2.11-1

Timeline

  • Apr 2, 2021 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›