Threats affecting pkg:rpm/fedora/iwd

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.9%	CVE-2024-28084iwd · Improper Initialization High7.5EPSS 0.9%2024-03-03CVE Database V5CVE-2024-28084 p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails. EPSS 0.9%Vulnerability CWE-665	CVE Database V5	2024-03-03
High	7.5	EPSS 1.1%	CVE-2023-52161iwd · Improper Authentication High7.5EPSS 1.1%2024-02-22CVE Database V5CVE-2023-52161 The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key. EPSS 1.1%Vulnerability CWE-287	CVE Database V5	2024-02-22

Page 1 of 1