CVE-2021-30004: Input Validation
Published Apr 2, 2021
·Updated
In wpasupplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.
Affected Software
2 affected components
w1.fi hostapd=2.9
w1.fi Wpa Supplicant=2.9
Remediation
Event History
Apr 2, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-30004?
The severity of CVE-2021-30004 is medium with a CVSS score of 5.3.
2
Which software is affected by CVE-2021-30004?
wpa_supplicant version 2.9 and hostapd version 2.9 are affected by CVE-2021-30004.
3
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-30004.
4
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The vulnerability is classified under CWE-20.
5
How can I fix CVE-2021-30004?
To fix CVE-2021-30004, it is recommended to update to a version of wpa_supplicant or hostapd that is not affected by the vulnerability.