w1.fi hostapd vulnerabilities and exploits

(subscribe to this query)

The implementations of SAE in hostapd prior to 2.10 and wpa_supplicant prior to 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 35

The implementations of EAP-pwd in hostapd prior to 2.10 and wpa_supplicant prior to 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 35

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

W1.fi Hostapd 2.9 W1.fi Wpa Supplicant 2.9

A vulnerability exists in how p2p/p2p_pd.c in wpa_supplicant prior to 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

W1.fi Wpa Supplicant Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Debian Debian Linux 10.0

hostapd prior to 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.

W1.fi Hostapd Debian Debian Linux 8.0 Debian Debian Linux 9.0

An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations using 802.11w, resu...

W1.fi Hostapd 2.6

An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different denial of service scenarios, either by c...

W1.fi Hostapd 2.6

hostapd prior to 2.10 and wpa_supplicant prior to 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The a...

W1.fi Hostapd W1.fi Wpa Supplicant Debian Debian Linux 8.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04

The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x up to and including 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked in...

W1.fi Hostapd Fedoraproject Fedora 30 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Debian Debian Linux 10.0

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook