CVE-2020-0326: 
NixOS vulnerability analysis and mitigation

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write vulnerability due to a missing bounds check. The vulnerability affects multiple Android versions including Android 8.1, 9, 10, and 11, as well as various Linux distributions using wpa_supplicant. The issue was tracked as CVE-2021-0326 and Android ID A-172937525 (Ubuntu Security).

The vulnerability exists in the P2P (Wi-Fi Direct) group information handling functionality of wpa_supplicant. The issue specifically occurs in the p2p_copy_client_info function of p2p.c, where a missing bounds check can lead to a heap overflow condition. The vulnerability has been assigned a CVSS 3.1 base score of 7.5 (High), with an attack vector requiring adjacent network access and high attack complexity (Ubuntu Security).

If successfully exploited, this vulnerability could lead to remote code execution on devices performing Wi-Fi Direct searches. The impact is particularly severe as it requires no additional execution privileges and can be executed without user interaction. The vulnerability affects confidentiality, integrity, and availability, all rated as High in the CVSS scoring (Ubuntu Security).

The vulnerability can be exploited by a physically proximate attacker when the target device is performing a Wi-Fi Direct search. No user interaction is required for exploitation, and no additional execution privileges are needed, making it particularly concerning from a security perspective (Ubuntu Security).

Multiple vendors have released patches to address this vulnerability. Ubuntu has released fixes across multiple versions: Ubuntu 20.10 (2:2.9-1ubuntu8.1), 20.04 LTS (2:2.9-1ubuntu4.2), 18.04 LTS (2:2.6-15ubuntu2.7), 16.04 LTS (2.4-0ubuntu6.7), and 14.04 LTS (2.1-0ubuntu1.7+esm3). Debian has also provided fixes in various releases including bullseye, bookworm, and sid (Ubuntu Security, Debian Security).