CVE-2023-52161

Name	CVE-2023-52161
Description	The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3738-1, DSA-5631-1
Debian Bugs	1064062

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
iwd (PTS)	bullseye (security), bullseye	1.14-3+deb11u1	fixed
	bookworm, bookworm (security)	2.3-1+deb12u1	fixed
	trixie	3.8-2	fixed
	forky, sid	3.10-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
iwd	source	buster	0.14-2+deb10u1	DLA-3738-1
iwd	source	bullseye	1.14-3+deb11u1	DSA-5631-1
iwd	source	bookworm	2.3-1+deb12u1	DSA-5631-1
iwd	source	(unstable)	2.14-1		1064062

Notes

https://www.top10vpn.com/research/wifi-vulnerabilities/
https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=6415420f1c92012f64063c131480ffcef58e60ca (2.14)