PT-2024-1721 · Unknown · Inet Wireless Daemon

Mathy Vanhoef · Published 2024-01-29 · Updated 2024-08-29 · CVE-2023-52161

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iNet wireless daemon (IWD) versions prior to 2.14

Description The issue allows attackers to gain unauthorized access to a protected Wi-Fi network by skipping certain messages in the EAPOL handshake and sending a message with an all-zero key. This can be done by exploiting the Access Point functionality in the eapol auth key handle function in eapol.c. The vulnerability affects private networks and is particularly dangerous for PCs running Linux, as it exposes home networks using a Linux device as an access point, allowing unauthorized access without a password.

Recommendations For versions prior to 2.14, update to version 2.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable Access Point functionality until a patch is available. Avoid using the eapol auth key handle function in the affected API endpoint until the issue is resolved.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-300

Related Identifiers

AZL-43933

AZL-44235

BDU:2024-01425

CVE-2023-52161

DLA-3738-1

DSA-5631-1

Affected Products

Inet Wireless Daemon

References · 59

• https://osv.dev/vulnerability/AZL-44235 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5631-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52161 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/FOQ6VEE3CPJAQLMMGMLCYDGWHVG7UCJI · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/4KSGT4IZ23CJBOQA3AFYEMBJ5OHFZBMK · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYRPQ3OLV3GGLUCDYWBHU34DLBLM62XJ · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52161 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3738-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52161 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOQ6VEE3CPJAQLMMGMLCYDGWHVG7UCJI · Vendor Advisory
• https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=6415420f1c92012f64063c131480ffcef58e60ca · Patch