BSD PortsVulnerable: version 2.6nb3 is affected by 14 known vulnerabilities. See below.
net/wpa_supplicant 2.6nb3 NetBSD
Wireless connection client daemon for WPA, WPA2, and WEP
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- modified-bsd
- Categories
- net
- Package size
- 267.9 KiB, 808.9 KiB installed
Description
The wpa_supplicant package provides a wireless client daemon that supports WPA, WPA2 (IEEE 802.11i / RSN), and WEP. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver. It supports several EAP authentication methods.
This package also includes the wpa_cli console frontend.
In the other systems
The newest version among them is 2.12, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | net/wpa_supplicant | 2.6nb3 behind since 2026-08-10 | 14 known | - | [email protected] | - |
| FreeBSD | security/wpa_supplicant by name | 2.12_1 newest | none known | - | [email protected] | 2026-08-18 |
| OpenBSD | security/wpa_supplicant by name | 2.9p7 behind since 2026-08-10 | no data | - | The OpenBSD ports mailing-list <[email protected]> | - |
| DragonFly | security/wpa_supplicant by name | 2.10_10 behind since 2026-08-10 | none known | - | [email protected] | - |
| MidnightBSD | security/wpa_supplicant by name | 2.11_1 behind since 2026-08-10 | no data | - | [email protected] | 2026-08-07 |
| HardenedBSD | security/wpa_supplicant by name | 2.12_1 newest | no data | - | [email protected] | - |
| GhostBSD | security/wpa_supplicant by name | 2.12_1 newest | no data | - | [email protected] | - |
| OPNsense | security/wpa_supplicant by name | 2.11_7 behind since 2026-08-10 | no data | - | [email protected] | - |
Install
Binary package:
pkgin install wpa_supplicantFrom pkgsrc:
cd /usr/pkgsrc/net/wpa_supplicant && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 2.6nb3 |
| NetBSD 10.1 aarch64 | 2.6nb3 |
| SmartOS / illumos x86_64 | - |
| macOS 15 arm64 | - |
Dependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 1
No port depends on this one.
Known vulnerabilities 14
- wpa_supplicant: sensitive-information-disclosure (CVE-2018-14526)
- wpa_supplicant: denial-of-service (CVE-2019-11555)
- wpa_supplicant: side-channel (CVE-2019-13377)
- wpa_supplicant: remote-denial-of-service (CVE-2019-16275)
- wpa_supplicant: side-channel (CVE-2019-9494)
- wpa_supplicant: side-channel (CVE-2019-9495)
- wpa_supplicant: invalid-validation (CVE-2019-9496)
- wpa_supplicant: invalid-validation (CVE-2019-9497)
- wpa_supplicant: invalid-validation (CVE-2019-9498)
- wpa_supplicant: invalid-validation (CVE-2019-9499)
- wpa_supplicant: denial-of-service (CVE-2021-27803)
- wpa_supplicant: invalid-validation (CVE-2021-30004)
- wpa_supplicant: side-channel (CVE-2022-23303)
- wpa_supplicant: side-channel (CVE-2022-23304)