OpenWrt Security Bulletin: Multiple Vulnerabilities in Dropbear, wolfSSL, mac80211, and LuCI

OpenWrt Security Advisory Summary Vulnerability Overview CVE-2025-14282: Dropbear privilege escalation vulnerability via Unix domain socket forwarding. CVE-2025-42525: Local privilege escalation vulnerability. CVE-2025-62529: Heap buffer overflow vulnerability. CVE-2024-54142: OpenWrt auxiliary system server build artifact poisoning via truncated SHA-256 hashes and command injection. CVE-2022-42721, CVE-2022-42722: Multiple issues in mac80211 and cfg80211. CVE-2022-39173: wolfSSL buffer overflow vulnerability during TLS 1.3 handshake. CVE-2021-28961: Multiple authenticated RCEs. CVE-2021-33425: Stored XSS in OpenWrt UCI variables. CVE-2021-32019: XSS due to missing input validation in hostname display. CVE-2020-36177: wolfSSL heap buffer overflow vulnerability. CVE-2020-22161: Routing loops in netdsl and edipconfig on point-to-point links. CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687: Multiple issues in dnsmasq. CVE-2020-28914: Memory leak after OpenWrt forum interruption. CVE-2020-25705: Linux kernel ICMP rate limiting can be exploited to facilitate DNS poisoning attacks. CVE-2020-11752: Out-of-bounds read and potential buffer overflow. CVE-2020-11750: Out-of-bounds read and potential buffer overflow. CVE-2020-8597: ppp buffer overflow vulnerability. CVE-2020-7248: Fuzzable JSON serialization vulnerability. CVE-2020-7982: Type coercion leading to MITM (Man-in-the-Middle). CVE-2019-15945: Invalid data access via HTTP POST requests. CVE-2019-5101, CVE-2019-5102: Kernel information disclosure. CVE-2019-17367: LuCI CSRF vulnerability. CVE-2019-11-51: LuCI stored XSS. Affected Versions All affected OpenWrt versions, depending on the specific vulnerabilities listed above. Remediation Update to the latest OpenWrt version to remediate all the aforementioned vulnerabilities. For specific vulnerabilities, refer to the corresponding security advisories for detailed remediation steps. POC Code or Exploit Code Specific POC code or exploit code is not provided on this page. --- Last Modified: 2020/03/25 17:09 by jow Contribution Note: If you wish to contribute to the OpenWrt wiki, please post here or request access via IRC.

Goal Reached Thanks to every supporter — we hit 100%!

OpenWrt Security Bulletin: Multiple Vulnerabilities in Dropbear, wolfSSL, mac80211, and LuCI