7.5

CVE-2021-27803: debian debian_linux

CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2021-27803MGASA-2021-0095SUSE-SU-2021:0720-1
Published 26-02-2021Last modified 18-12-2025
Open JSON

Vulnerability summary

CVE-2021-27803 is a high (CVSS 7.5) vulnerability in debian debian_linux. EPSS estimates a 1.23% chance of exploitation in the next 30 days, higher than 68.4% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
1.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
DSA-4898-1OPENSUSE-SU-2024:11515-1

Timeline

  1. 26-02-2021
    PublishedVulnerability first disclosed.
  2. 18-12-2025
    Last modifiedVulnerability information updated.

Description

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

CVSS metrics

7 scores · 6 sources · 2 versions

EPSS trend

Probability

1.23%

Chance of exploitation in the next 30 days

Percentile

68%

Versus all other CVEs

30-day change

0.00 pp

From 1.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse30 products
  • wpa_supplicant&distro=HPE Helion OpenStack 8< 2.6-15.16.1
  • wpa_supplicant&distro=SUSE Enterprise Storage 6< 2.9-4.26.1
  • wpa_supplicant&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 2.9-4.26.1
  • wpa_supplicant&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 2.9-4.26.1
  • wpa_supplicant&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 2.9-4.26.1
Redhat3 products
  • wpa_supplicant< 1:2.6-12.el7_9.2 | < 1:2.9-2.el8_3.1 | < 1:2.9-2.el8_2.1 | < 1:2.7-2.el8_1.1
  • wpa_supplicant-debuginfo< 1:2.6-12.el7_9.2 | < 1:2.9-2.el8_3.1 | < 1:2.9-2.el8_2.1 | < 1:2.7-2.el8_1.1
  • wpa_supplicant-debugsource< 1:2.9-2.el8_3.1 | < 1:2.9-2.el8_2.1 | < 1:2.7-2.el8_1.1
Debian2 products
Mageia2 products
  • wpa_supplicant< 2.9-1.4.mga7
  • wpa_supplicant< 2.9-8.1.mga8
Alpine1 product
  • wpa_supplicant≥ 1.0, < 2.8-r5 | ≥ 1.0, < 2.9-r7 | ≥ 1.0, < 2.9-r10 | ≥ 1.0, < 2.9-r12
Fedoraproject1 product
Opensuse1 product
  • wpa_supplicant&distro=openSUSE Leap 15.2< 2.9-lp152.8.9.1
Ubuntu1 product
  • wpa< 2.4-0ubuntu6.8 | < 2:2.6-15ubuntu2.8 | < 2:2.9-1ubuntu4.3 | < 2.1-0ubuntu1.7+esm4
W1.fi1 product

9 vendors · 42 products

References

36 links
Show all 36 references