Advisory ROSA-SA-2024-2367

software: hostapd 2.9
WASP: ROSA-CHROME

package_evr_string: hostapd-2.9-2.src.rpm

CVE-ID: CVE-2022-23303
BDU-ID: 2022-07363
CVE-Crit: CRITICAL.
CVE-DESC.: A vulnerability in the SAE implementation of the Wi-Fi WPA Supplicant secure access client is related to information disclosure via a mismatch. The vulnerability allows an attacker acting remotely to disclose protected information
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update hostapd

CVE-ID: CVE-2022-23304
BDU-ID: 2022-07364
CVE-Crit: CRITICAL.
CVE-DESC.: A vulnerability in the EAP-pwd implementation of the Wi-Fi WPA Supplicant secure access client is related to information disclosure via a mismatch. The vulnerability allows an attacker acting remotely to disclose protected information
CVE-STATUS: Resolved
CVE-REV: To close, run the command: sudo dnf update hostapd