Skip to content

CVE-2021-30004

CVE-2021-30004

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

CVSS 4.3 · Medium · EPSS 1.6% · Fix available

Published: 2021-04-02T00:00:00.000Z
Updated: 2026-07-07T18:29:25.266Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
wpa Debian:12
Affected ranges
- ECOSYSTEM: < 2:2.10-1
Update to 2:2.10-1
wpa Debian:13
Affected ranges
- ECOSYSTEM: < 2:2.10-1
Update to 2:2.10-1
wpa Debian:14
Affected ranges
- ECOSYSTEM: < 2:2.10-1
Update to 2:2.10-1

Original sources

Check your server →