Linux · Security advisory · March 11, 2021

ELSA-2021-0809: wpa_supplicant security update

ELSA-2021-0809, released March 11, 2021, fixes 1 CVE in wpa_supplicant (version 1:2.9-2.el8_3.1). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0123

68th percentile

Fixed package versions

Product	Release	Fixed in
wpa_supplicant	ol 8	1:2.9-2.el8_3.1

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2021-27803	wpa_supplicant: The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and va...		7.5	0.0123	None reported

Also fixes CVE-2021-27803

RHSA-2021:0809
wpa_supplicant on RHEL 8
hostapd 2:2.6-15ubuntu2.8
hostapd on Ubuntu 18.04.6 LTS (bionic)
hostapd 2:2.9-1ubuntu4.3
hostapd on Ubuntu 20.04 LTS (focal)
wpagui 2:2.6-15ubuntu2.8
wpagui on Ubuntu 18.04.6 LTS (bionic)
wpagui 2:2.9-1ubuntu4.3
wpagui on Ubuntu 20.04 LTS (focal)
wpasupplicant 2:2.6-15ubuntu2.8
wpasupplicant on Ubuntu 18.04.6 LTS (bionic)
wpasupplicant 2:2.9-1ubuntu4.3
wpasupplicant on Ubuntu 20.04 LTS (focal)

Vendor advisory

https://linux.oracle.com/errata/ELSA-2021-0809.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo