CVE-2021-27803

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

• http://www.openwall.com/lists/oss-security/2021/02/27/1Mailing List, Mitigation, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00003.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZGUR5XFHATVXTRAEJMODS7ROYHA56NX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4/
• https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patchPatch, Vendor Advisory
• https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txtMitigation, Vendor Advisory
• https://www.debian.org/security/2021/dsa-4898Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/02/25/3Mailing List, Mitigation, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/02/27/1Mailing List, Mitigation, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00003.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZGUR5XFHATVXTRAEJMODS7ROYHA56NX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4/
• https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patchPatch, Vendor Advisory
• https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txtMitigation, Vendor Advisory
• https://www.debian.org/security/2021/dsa-4898Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/02/25/3Mailing List, Mitigation, Third Party Advisory

Published

Feb 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27795Brocade Fabric OS (FOS) hardware platforms running any vers…8.1
• CVE-2021-27796A vulnerability in Brocade Fabric OS versions before Brocade…6.5
• CVE-2021-27797Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h,…9.8
• CVE-2021-27798A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3…5.5
• CVE-2021-27799ean_leading_zeroes in backend/upcean.c in Zint Barcode Gener…7.5
• CVE-2021-27802Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-27804JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory c…9.8
• CVE-2021-27807A carefully crafted PDF file can trigger an infinite loop wh…5.5
• CVE-2021-27811A code injection vulnerability has been discovered in the Up…7.2
• CVE-2021-27815NULL Pointer Deference in the exif command line tool, when p…5.5
• CVE-2021-27817A remote command execution vulnerability in shopxo 1.9.3 all…9.8
• CVE-2021-27821The Web Interface for OpenWRT LuCI version 19.07 and lower h…6.1