CVE-2019-9496
High
Description
An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd process to terminate, performing a denial of service attack. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.
SeverityHigh
CVSS7.5
Exploit probability—
Product
W1.fi Hostapd
PublishedApr 17, 2019
First seenApr 17, 2019
Weakness typeCWE-642CWE-642
How to fix
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/
- security.freebsd.org/advisories/FreeBSD-SA-19:03.wpa.asc
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| w1.fi hostapd | v ≤ 2.7 | — |
| w1.fi wpa_supplicant | v ≤ 2.7 | — |
| fedoraproject fedora | 28, 29, 30 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.