906 matches found
CVE-2019-9495
The implementations of EAP-PWD in hostapd and wpasupplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpasupplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful...
CVE-2019-9494
The implementations of SAE in hostapd and wpasupplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both...
CVE-2019-9498
The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication,...
UBUNTU-CVE-2019-9499
The implementations of EAP-PWD in wpasupplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection...
UBUNTU-CVE-2019-9498
The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication,...
UBUNTU-CVE-2019-9497
The implementations of EAP-PWD in hostapd EAP Server and wpasupplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not...
PT-2019-6124
Name of the Vulnerable Software and Affected Versions hostapd versions with SAE support wpa supplicant versions prior to and including 2.7 Description The issue is related to an invalid authentication sequence that could result in the hostapd process terminating due to missing state validation...
PT-2019-2180
Name of the Vulnerable Software and Affected Versions hostapd and wpa supplicant with EAP-PWD support affected versions not specified Description The issue is related to the implementations of EAP-PWD in hostapd and wpa supplicant, which are vulnerable to side-channel attacks due to cache access...
PT-2019-2182
Name of the Vulnerable Software and Affected Versions hostapd with SAE support versions prior to 2.4 wpa supplicant with SAE support versions prior to 2.4 hostapd with EAP-pwd support versions prior to 2.7 wpa supplicant with EAP-pwd support versions prior to 2.7 Description The issue is related ...
PT-2019-2181
Name of the Vulnerable Software and Affected Versions hostapd with SAE support versions prior to 2.4 hostapd with EAP-pwd support versions prior to 2.7 wpa supplicant with SAE support versions prior to 2.4 wpa supplicant with EAP-pwd support versions prior to 2.7 Description The issue is related ...
FreeBSD -- EAP-pwd missing commit validation
Problem Description: EAP-pwd implementation in hostapd EAP server and wpasupplicant EAP peer does not to validate the received scalar and element values in EAP-pwd-Commit messages properly. This could result in attacks that would be able to complete EAP-pwd authentication exchange without the...
FreeBSD -- SAE confirm missing state validation
Problem Description: When hostapd is used to operate an access point with SAE Simultaneous Authentication of Equals; also known as WPA3-Personal, an invalid authentication sequence could result in the hostapd process terminating due to a NULL pointer dereference when processing SAE confirm messag...
FreeBSD -- EAP-pwd side-channel attack
Problem Description: Potential side channel attacks in the SAE implementations used by both hostapd and wpasupplicant see CVE-2019-9494 and VU871675. EAP-pwd uses a similar design for deriving PWE from the password and while a specific attack against EAP-pwd is not yet known to be tested, there i...
PT-2019-6123
Name of the Vulnerable Software and Affected Versions hostapd with SAE support versions prior to 2.7 wpa supplicant with SAE support versions prior to 2.7 Description The issue is related to the implementation of SAE in hostapd and wpa supplicant, which is vulnerable to side channel attacks due t...
PT-2019-2183
Name of the Vulnerable Software and Affected Versions wpa supplicant versions prior to and including 2.4 wpa supplicant versions prior to and including 2.7 hostapd with SAE support prior to and including version 2.4 hostapd with EAP-pwd support prior to and including version 2.7 Description The...
openSUSE Security Update : hostapd (openSUSE-2019-839)
hostapd was updated to fix following security issue : - CVE-2018-14526: Ignore unauthenticated encrypted EAPOL-Key data bsc1104205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
DEBIAN-CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
CVE-2016-10743
hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an osrandom function call...
