The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-acb9425c93 advisory.

    libell 0.69:

            Add support for getting remaining microseconds left on a timer.
            Add support for setting link MTU on a network interface.

    iwd 2.21:

            Fix issue with pending scan requests after regdom update.
            Fix issue with handling the rearming of the roaming timeout.
            Fix issue with survey request and externally triggered scans.
            Fix issue with RSSI fallback when setting CQM threshold fails.
            Fix issue with FT-over-Air without offchannel support.
            Add support for per station Affinities property.

    bluez 5.78:

            Fix issue with handling notification of scanned BISes to BASS             Fix issue with handling checking BIS caps against peer caps.
            Fix issue with handling MGMT Set Device Flags overwrites.
            Fix issue with handling ASE notification order.
            Fix issue with handling BIG Info report events.
            Fix issue with handling PACS Server role.
            Fix issue with registering UHID_START multiple times.
            Fix issue with pairing method not setting auto-connect.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-223428e702 advisory.

    libell 0.69:

            Add support for getting remaining microseconds left on a timer.
            Add support for setting link MTU on a network interface.

    iwd 2.21:

            Fix issue with pending scan requests after regdom update.
            Fix issue with handling the rearming of the roaming timeout.
            Fix issue with survey request and externally triggered scans.
            Fix issue with RSSI fallback when setting CQM threshold fails.
            Fix issue with FT-over-Air without offchannel support.
            Add support for per station Affinities property.

    bluez 5.78:

            Fix issue with handling notification of scanned BISes to BASS             Fix issue with handling checking BIS caps against peer caps.
            Fix issue with handling MGMT Set Device Flags overwrites.
            Fix issue with handling ASE notification order.
            Fix issue with handling BIG Info report events.
            Fix issue with handling PACS Server role.
            Fix issue with registering UHID_START multiple times.
            Fix issue with pairing method not setting auto-connect.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-73626281d8 advisory.

    Update to upstream version 2.11.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210991	Fedora 41 : bluez / iwd / libell (2024-acb9425c93)	Nessus	Fedora Local Security Checks	high
206950	Fedora 40 : bluez / iwd / libell (2024-223428e702)	Nessus	Fedora Local Security Checks	high
204984	Fedora 40 : hostapd / wpa_supplicant (2024-73626281d8)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2023-52424

high

Tenable Plugins

high

high

high