w1.fi wpa supplicant vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

The implementations of EAP-pwd in hostapd prior to 2.10 and wpa_supplicant prior to 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 35

9.8

CVSSv3

The implementations of SAE in hostapd prior to 2.10 and wpa_supplicant prior to 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 35

5.3

CVSSv3

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c.

W1.fi Hostapd 2.9 W1.fi Wpa Supplicant 2.9

7.5

CVSSv3

A vulnerability exists in how p2p/p2p_pd.c in wpa_supplicant prior to 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range.

W1.fi Wpa Supplicant Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Debian Debian Linux 10.0

6.5

CVSSv3

hostapd prior to 2.10 and wpa_supplicant prior to 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The a...

W1.fi Hostapd W1.fi Wpa Supplicant Debian Debian Linux 8.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04

5.9

CVSSv3

The EAP-pwd implementation in hostapd (EAP server) prior to 2.8 and wpa_supplicant (EAP peer) prior to 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL p...

W1.fi Hostapd W1.fi Wpa Supplicant

5.9

CVSSv3

The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password...

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Synology Radius Server 3.0 Synology Router Manager Freebsd Freebsd 11.2 Freebsd Freebsd 12.0

1 Article

3.7

CVSSv3

The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary f...

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Leap 15.1 Opensuse Backports Sle 15.0 Debian Debian Linux 8.0 Synology Radius Server 3.0 Synology Router Manager Freebsd Freebsd 11.2 Freebsd Freebsd 12.0

7.5

CVSSv3

An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd proc...

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30

8.1

CVSSv3

The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an malicious user to complete EAP-PWD authentication without knowing the password. However, unless the cr...

W1.fi Hostapd W1.fi Wpa Supplicant Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook