← All advisories

Medium severity5.3NVD Advisory· Published Apr 2, 2021· Updated Jul 7, 2026

CVE-2021-30004

CVE-2021-30004

Description

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12

wpa_supplicant and hostapd/wpa_supplicant and hostapddescription
W1.fi/Hostapdllm-fuzzy
Range: 2.9
W1.fi/Wpa Supplicantllm-fuzzy
Range: 2.9
osv-coords9 versions
pkg:rpm/opensuse/hostapd&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/hostapd&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/wpa_supplicant&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/wpa_supplicant&distro=openSUSE%20Tumbleweed pkg:rpm/suse/hostapd&distro=SUSE%20Package%20Hub%2015%20SP2 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Micro%205.0 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
< 2.9-lp152.2.3.1+ 8 more
- (no CPE)range: < 2.9-lp152.2.3.1
- (no CPE)range: < 2.9-6.2
- (no CPE)range: < 2.9-lp152.8.12.1
- (no CPE)range: < 2.9-13.4
- (no CPE)range: < 2.9-bp152.2.3.1
- (no CPE)range: < 2.9-4.29.1
- (no CPE)range: < 2.9-4.29.1
- (no CPE)range: < 2.9-23.12.1
- (no CPE)range: < 2.9-23.12.1

Patches

Vulnerability mechanics

References

2

w1.fi/cgit/hostap/commit/nvdPatchVendor Advisory
security.gentoo.org/glsa/202309-16nvd

News mentions

0

No linked articles in our index yet.