What’s Vulnerable › Vulnerabilities

CVE-2021-30004

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-02 · updated 2026-07-07
• Weakness: CWE-20

Description

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

Affected products

• w1.fi hostapd: 2.9
• Canonical Ltd. wpa_supplicant: 2.9

References

• https://security.gentoo.org/glsa/202309-16
• https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15
• https://security.gentoo.org/glsa/202309-16
• https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15

Get alerted when CVE-2021-30004 or the next vulnerability affects your stack