d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
eeb26cf52c
freebsd-dev/contrib
History
Cy Schubert eeb26cf52c wpa: import fix for P2P provision discovery processing vulnerability 
Latest version available from: https://w1.fi/security/2021-1/

Vulnerability

A vulnerability was discovered in how wpa_supplicant processes P2P
(Wi-Fi Direct) provision discovery requests. Under a corner case
condition, an invalid Provision Discovery Request frame could end up
reaching a state where the oldest peer entry needs to be removed. With
a suitably constructed invalid frame, this could result in use
(read+write) of freed memory. This can result in an attacker within
radio range of the device running P2P discovery being able to cause
unexpected behavior, including termination of the wpa_supplicant process
and potentially code execution.

Vulnerable versions/configurations

wpa_supplicant v1.0-v2.9 with CONFIG_P2P build option enabled

An attacker (or a system controlled by the attacker) needs to be within
radio range of the vulnerable system to send a set of suitably
constructed management frames that trigger the corner case to be reached
in the management of the P2P peer table.

Note: FreeBSD base does not enable P2P.
2021-03-17 06:06:55 -07:00
..
apr Update apr to 1.7.0. See contrib/apr/CHANGES for a summary of changes. 2020-05-31 22:12:56 +00:00
apr-util Update apr-util to 1.6.1. See contrib/apr-util/CHANGES for a summary of 2020-06-01 10:14:45 +00:00
atf Import atf 0.22 snapshot ca73d08c3fc1ecffc1f1c97458c31ab82c12bb01 2021-02-04 15:03:05 +00:00
bc bc: Vendor import new version 3.3.3 2021-03-05 12:33:01 +01:00
bearssl
blacklist blacklistd.conf.5: typo/grammar fixes 2020-05-19 00:15:19 +00:00
bmake Merge bmake-20210206 2021-02-10 22:03:22 -08:00
bsnmp Revert "bsnmpclient(3): make it thread-safe" 2020-12-29 19:55:05 +00:00
byacc yacc: Regen test cases for the previous commit 2021-02-11 18:41:28 -05:00
bzip2
capsicum-test capsicum-test: Update for O_BENEATH removal 2021-03-12 17:12:10 +00:00
com_err
cortex-strings
dialog dialog: fix macro redefinition 2021-03-01 16:01:44 +01:00
diff Fix macro-redefined warning in gnu/diff for fputc_unlocked 2021-01-19 21:23:25 +00:00
dma
ee ee(1): Whitespace cleanup 2020-12-10 10:58:30 +00:00
elftoolchain elftoolchain: stop leaving tempfiles on error 2021-03-04 12:24:07 +00:00
expat MFV r355071: libbsdxml (expat) 2.2.9. 2019-11-25 07:48:16 +00:00
file Revert r362261, "Re-apply r333944 to unbreak ports" 2020-06-29 13:30:48 +00:00
flex lex: Do not let input() return 0 when end-of-file is reached 2021-02-17 02:22:47 -05:00
gdtoa
googletest Re-enable disabled googletest-port-test tests after r363820 2020-08-04 02:20:15 +00:00
hyperv/tools
ipfilter Simplify the FreeBSD check using __FreeBSD__ compiler macro. 2021-02-08 16:36:27 -08:00
jemalloc Fix abort in jemalloc extent coalescing. 2020-12-18 10:09:21 +00:00
kyua Revert r359385-r359387 2020-03-29 02:40:03 +00:00
ldns Fix crash in drill(1) when IP has two subsequent dots 2020-06-22 23:13:14 +00:00
ldns-host
less MFV r366990: less v563. 2020-10-24 15:58:42 +00:00
lib9p Import lib9p 9d5aee77bcc1bf0e79b0a3bfefff5fdf2146283c. 2020-10-03 18:52:54 +00:00
libarchive contrib/libarchive: Import libarchive 3.5.1 2020-12-28 00:34:06 +01:00
libbegemot
libc-pwcache pwcache.3: Explicitly document OOM condition 2020-05-05 17:55:45 +00:00
libc-vis
libcxxrt Partially revert libcxxrt changes to avoid _Unwind_Exception change 2021-03-13 14:54:24 +01:00
libdivsufsort
libedit
libevent
libexecinfo Pull in fix from upstream NetBSD rev. 1.5: 2020-09-21 16:43:38 +00:00
libpcap MFV r355890: 2019-12-21 21:05:53 +00:00
libucl
libxo Import libxo-1.4.0: 2020-01-25 21:16:45 +00:00
llvm-project clang: Fix -gz=zlib options for linker 2021-03-04 15:10:03 -05:00
lua contrib/lua: update to 5.4.2 2021-01-13 23:56:18 -06:00
lutok Add liblutok a lightweight C++ API for lua. 2020-03-23 18:26:23 +00:00
mandoc flua: Add a libjail module 2020-10-24 17:08:59 +00:00
mknod
mtree fts_read: Handle error from a NULL return better. 2020-12-08 23:38:26 +00:00
ncurses ncurses: import version 6.2-20210220 2021-02-25 19:26:56 +01:00
netbsd-tests Allow ssp_test:read to pass more reliably 2021-03-01 19:56:05 +00:00
netcat Adjust .Dd, missed in r363084. 2020-07-10 19:58:07 +00:00
ngatm
ntp MFV r362565: 2020-06-24 01:51:05 +00:00
nvi nvi: fix catalog generation 2021-02-26 16:32:01 +01:00
ofed infiniband-diags: Fix memory leak in dump_multicast_tables 2020-08-31 16:18:48 +00:00
one-true-awk Fix another UBSan error in awk 2020-09-21 19:03:12 +00:00
openbsm close_range: add audit support 2021-02-23 17:47:07 +00:00
opencsd/decoder Update opencsd to 0.14.2 2020-06-17 10:42:20 +00:00
openpam Merge upstream r948: fix race condition in openpam_ttyconv(3). 2020-11-19 05:46:59 +00:00
openresolv MFV 354917, 354918, 354919 2019-11-20 23:56:20 +00:00
opie
pam_modules/pam_passwdqc
pf
pjdfstest
pnglite pnglite: should use ntohl 2021-01-12 00:56:35 +02:00
pnpinfo
processor-trace
sendmail Key decleration of union semun on src version 2020-10-26 17:52:28 +00:00
serf serf: Fix the default return value of the BIO control method. 2021-02-03 14:59:32 -08:00
smbfs mount_smbfs: Issue a warning when .nsmbrc section name contains lowercase characters. 2020-01-03 12:54:14 +00:00
sqlite3 Import sqlite 3.34.1 (3340100). 2021-01-25 20:24:44 -08:00
subversion Update Subversion to 1.14.1 LTS. See contrib/subversion/CHANGES for a 2021-02-13 14:38:51 +01:00
tcp_wrappers
tcpdump Revert r362466 2020-06-22 07:46:24 +00:00
tcsh Merge tcsh 6.22.03-ceccc7f 2021-03-14 19:33:13 +03:00
telnet Set stdout & stderr unbuffered, so that the "telnet>" prompt 2020-12-29 21:05:48 +00:00
terminus contrib: setup terminus 2021-01-02 21:03:28 +02:00
tnftp Fix poor performance of ftp(1) due to small SO_SNDBUF and SO_RCVBUF. 2020-02-27 19:49:59 +00:00
traceroute ping: fix some man pages and tests after r368045 2020-11-26 04:55:02 +00:00
tzcode ctime(3): Bump .Dd after r362165 2020-06-17 11:57:48 +00:00
tzdata contrib/tzdata: import tzdata 2021a 2021-01-25 08:18:14 +08:00
unbound MFV d60fa10fd8: 2021-02-09 20:27:25 -08:00
unvis
vis vis(1): Add EXAMPLES section 2021-02-18 19:10:33 +01:00
wpa wpa: import fix for P2P provision discovery processing vulnerability 2021-03-17 06:06:55 -07:00
xz liblzma: Make liblzma use libmd implementation of SHA256. 2020-06-20 21:32:07 +00:00