hostapd vulnerable to improper processing of RADIUS packets

🗓️ 12 Mar 2025 05:19:15Reported by Japan Vulnerability NotesType

hostapd vulnerability in processing remote authentication packets allows attackers between hostapd and the server to disrupt authentications with patches available.

Reporter	Title	Published	Views	Family All 49
AlpineLinux	CVE-2025-24912	12 Mar 202504:43	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: wpa_supplicant (CVE-2025-24912)	17 Apr 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: wpa_supplicant (CVE-2025-24912)	13 Apr 202500:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wpa_supplicant (SUSE-SU-2025:0977-1)	22 Mar 202500:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2026:3103-1)	18 Jul 202600:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : wpa_supplicant (SUSE-SU-2026:3159-1)	22 Jul 202600:00	–	nessus
Tenable Nessus	TencentOS Server 4: hostapd (TSSA-2025:0284)	20 Nov 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-24912	1 Sep 202500:00	–	nessus
CBLMariner	CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3	16 Apr 202515:08	–	cbl_mariner
CBLMariner	CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3	11 Apr 202518:10	–	cbl_mariner

Source	Link
w1	www.w1.fi/hostapd/
w1	www.w1.fi/cgit/hostap/commit/
w1	www.w1.fi/cgit/hostap/commit/
cve	www.cve.org/CVERecord
jvn	www.jvn.jp/en/jp/JVN19358384/index.html
ipa	www.ipa.go.jp/en/security/vulnerabilities/cwe.html

12 Mar 2025 05:19Current

6.7Medium risk

Vulners AI Score6.7

CVSS 33.7

EPSS0.0071

SSVC